Senior Cyber Incident Response & Forensics

EY; Boston (MA); On-site; USD 71,000 - 130,000; Full time

Job summary

EY invites an experienced Senior to lead client engagements on cyber incidents, data breaches and information security events. Focus is on post-incident response, assessing impacted data, evaluating legal obligations, coordinating remediation, and managing stakeholder communications.

You will collaborate across cybersecurity, privacy, legal, forensic, compliance, and client teams, guiding remediation efforts and driving lessons learned while building strong client relationships and contributing

Qualifications

• Bachelor’s or Master’s degree in computer science, information systems, engineering, cybersecurity or related field.
• 2+ years of experience in cyber incident response, data breach response, digital forensics, privacy consulting, cybersecurity consulting, risk advisory, or related disciplines.
• Strong understanding of security threats, vulnerabilities, and incident response; ability to digest threat intelligence and apply it to client engagements.
• A basic understanding of legalities surrounding electronic discovery and analysis.
• Understanding of privacy and data protection regulations, including notification and reporting requirements across multiple jurisdictions.
• Strong written and verbal communication skills.
• Achieved or be willing to pursue related professional certifications such as GCFE, GCFA, GCIH, CISA, CISM, CISSP, or CCIM.
• The ability and willingness to travel and work in excess of standard hours when necessary.
• Access to reliable transportation to/from the EY office and client sites; driver's license recommended.

Responsibilities

• Support end-to-end breach response engagements following incident containment and forensic investigation.
• Conduct assessment and analysis of impacted data sets to determine potential exposure of sensitive, confidential, regulated, or personal information.
• Coordinate with cross-functional teams including cybersecurity, privacy, legal, forensic, compliance, and client stakeholders.
• Assist clients on notification, regulatory, contractual, and reporting obligations arising from security incidents.
• Perform data review, document analysis, impact assessments, and support decision-making related to affected individuals and organizations.
• Contribute to remediation planning and implementation, including process improvements and control enhancements.

Skills

Cyber incident response

Data breach analysis

Regulatory compliance

Project management

Communication skills

Client relationship management

Mentoring

Multidisciplinary collaboration

Technological innovation

Emotional intelligence

Education

Bachelor’s or Master’s degree in computer science, information systems, engineering, cybersecurity or related field

GCFE, GCFA, GCIH, CISA, CISM, CISSP, CCIM certifications (preferred)

Job description

EY invites an experienced Senior to lead client engagements on cyber incidents, data breaches and information security events. Focus is on post-incident response, assessing impacted data, evaluating legal obligations, coordinating remediation, and managing stakeholder communications.

You will collaborate across cybersecurity, privacy, legal, forensic, compliance, and client teams, guiding remediation efforts and driving lessons learned while building strong client relationships and contributing