Senior Cyber Incident & Forensic Response Lead

EY; New York (NY); On-site; USD 72,000 - 130,000; Full time

Job summary

EY is seeking an experienced Senior to lead client engagements involving cyber incidents, data breaches, and information security events. The role focuses on post-incident response, helping clients assess impacted data, regulatory obligations, remediation, and communications.

You will coordinate with cybersecurity, privacy, legal, and other teams to deliver end-to-end breach response and support clients in notification and reporting requirements. Travel and demanding hours may be required.

Qualifications

• Bachelor’s or Master’s degree in computer science, information systems, engineering, cybersecurity or a related field.
• 2+ years of experience in cyber incident response, data breach response, digital forensics, privacy consulting, cybersecurity consulting, risk advisory, or related disciplines.
• Strong understanding of security threats, vulnerabilities, and incident response, to include the ability to digest threat intelligence and apply it to client engagements.
• Basic understanding of legalities surrounding electronic discovery and analysis.
• Understanding of privacy and data protection regulations, including notification and reporting requirements across multiple jurisdictions.
• Strong written and verbal communication skills.
• Willingness to pursue related professional certifications such as GCFE, GCFA, GCIH, CISA, CISM, CISSP, or CCIM.
• Ability and willingness to travel and work in excess of standard hours; access to reliable transportation.

Responsibilities

• Support end-to-end breach response engagements following incident containment and forensic investigation.
• Conduct assessment and analysis of impacted data sets to determine potential exposure of sensitive, confidential, regulated, or personal information.
• Coordinate with cross-functional teams including cybersecurity, privacy, legal, forensic, compliance, and client stakeholders.
• Assist clients on notification, regulatory, contractual, and reporting obligations arising from security incidents.
• Perform data review, document analysis, impact assessments, and support decision-making related to affected individuals and organizations.
• Contribute to remediation planning and implementation, including process improvements and control enhancements.

Skills

Cyber incident response

Data breach response

Digital forensics

Privacy consulting

Cybersecurity consulting

Risk advisory

Written communication

Education

Bachelor's or Master's in CS/IS/Engineering/Cybersecurity

Job description

EY is seeking an experienced Senior to lead client engagements involving cyber incidents, data breaches, and information security events. The role focuses on post-incident response, helping clients assess impacted data, regulatory obligations, remediation, and communications.

You will coordinate with cybersecurity, privacy, legal, and other teams to deliver end-to-end breach response and support clients in notification and reporting requirements. Travel and demanding hours may be required.