Lead Incident Response Coordinator - Cross-Functional Ops

EY; Wichita (KS); Hybrid; USD 104,800 - 192,200; Full time

Job summary

EY seeks a Lead Incident Response Coordinator to serve as the central point of coordination for operational, cybersecurity, infrastructure, connectivity, monitoring, and service-impacting incidents.

The role leads incident command activities, coordinates cross-functional response efforts, manages communications and escalations, tracks resolution actions, and helps ensure timely service restoration while maintaining operational accountability and stakeholder awareness.

Qualifications

• Bachelor's degree or equivalent experience in IT, cybersecurity, engineering, business, or related field.
• 6+ years in incident management, operations coordination, cybersecurity operations, infrastructure operations, service management, or technical delivery roles.
• Strong communication, facilitation, documentation, prioritization, and decision-support skills.
• Ability to operate under pressure and maintain structure during high-impact incidents.

Responsibilities

• Lead incidents and major operational events requiring cross-functional response.
• Establish incident command structure and response rhythm during active incidents.
• Coordinate response across technical, operational, cybersecurity, vendor, and stakeholder teams.
• Track incident actions through restoration and closure; ensure alignment to priorities.

Skills

Incident command

Service restoration

Stakeholder communications

Action tracking

Escalation management

Executive updates

Response coordination

Cross-domain triage

Status reporting

Major incident practices

Education

Bachelor's degree in Information Technology, Cybersecurity, Engineering, Business, or equivalent experience

Tools

Monitoring platforms

SIEM/SOC workflows

Ticketing systems

Collaboration tools

Operational dashboards

Job description

EY seeks a Lead Incident Response Coordinator to serve as the central point of coordination for operational, cybersecurity, infrastructure, connectivity, monitoring, and service-impacting incidents.

The role leads incident command activities, coordinates cross-functional response efforts, manages communications and escalations, tracks resolution actions, and helps ensure timely service restoration while maintaining operational accountability and stakeholder awareness.