Lead Incident Response Coordinator — Cross-Functional

EY; Rogers (AR); Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Hybrid work model

Total rewards package

Job summary

EY is seeking a Lead Incident Response Coordinator to act as the central point for operational, cybersecurity, infrastructure, connectivity, monitoring, and service-impacting incidents.

The role leads incident command activities, coordinates cross-functional response efforts, tracks restoration actions, and ensures timely service restoration while keeping stakeholders informed. It emphasizes coordination and accountability rather than deep technical remediation.

Qualifications

• Bachelor's degree in IT, cybersecurity, engineering, business or equivalent experience preferred.
• 6+ years in incident management, operations coordination, cybersecurity, or related roles.
• Experience coordinating incidents, escalations, and cross-functional response activities.
• Strong communication, facilitation, and decision-support skills.

Responsibilities

• Incident Command and Coordination for cross-functional response during major incidents.
• Escalation management and engagement of technical specialists and leadership.
• Develop incident communications for teams and stakeholders throughout lifecycle.
• Drive action tracking, restoration milestones, and closure of incidents.
• Coordinate across monitoring, network, security, and operations teams.
• Lead post-incident reviews and drive continuous improvement.

Skills

Incident management

Operations coordination

Cybersecurity operations

Infrastructure operations

Service management

Technical delivery

Communication

Facilitation

Education

Bachelor's degree in Information Technology, Cybersecurity, Engineering, Business, or equivalent experience preferred

Tools

ITIL certification

Security+ / CISSP (or equivalent)

Job description

EY is seeking a Lead Incident Response Coordinator to act as the central point for operational, cybersecurity, infrastructure, connectivity, monitoring, and service-impacting incidents.

The role leads incident command activities, coordinates cross-functional response efforts, tracks restoration actions, and ensures timely service restoration while keeping stakeholders informed. It emphasizes coordination and accountability rather than deep technical remediation.