Senior Cyber Incident Response & Forensics Lead

EY; San Francisco (CA); Hybrid; USD 85,000 - 140,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k) plans

Paid time off

Job summary

EY is seeking an experienced Senior to lead client engagements involving cyber incidents, data breaches, and information security events. This role focuses on post-incident response, helping clients assess impacted data, evaluate regulatory obligations, coordinate remediation, and manage stakeholder communications.

You will work with cross-functional teams across cybersecurity, privacy, legal, and compliance to drive effective incident response, lessons learned, and client outcomes in a

Qualifications

• Bachelor's or Master’s degree in computer science, information systems, engineering, cybersecurity or a related field.
• 2+ years of experience in cyber incident response, data breach response, digital forensics, privacy consulting, cybersecurity consulting, risk advisory, or related disciplines.
• Strong understanding of security threats, vulnerabilities, and incident response, to include the ability to digest threat intelligence and apply it to client engagements.
• A basic understanding of legalities surrounding electronic discovery and analysis.
• Understanding of privacy and data protection regulations, including notification and reporting requirements across multiple jurisdictions.
• Strong written and verbal communication skills.
• Achieved or be willing to pursue related professional certifications such as GCFE, GCFA, GCIH, CISA, CISM, CISSP, or CCIM.
• The ability and willingness to travel and work in excess of standard hours when necessary.
• Access to reliable transportation to/from the EY office and client sites. A driver's license is strongly recommended as ride share and public transportation options may not be available in all locations.

Responsibilities

• Lead client engagements involving cyber incidents, data breaches, and information security events, focusing on post-incident response.
• Assess impacted data and determine exposure of sensitive information.
• Coordinate remediation activities with cross-functional teams (cybersecurity, privacy, legal, forensic, compliance, stakeholders).
• Advise clients on notification, regulatory, contractual, and reporting obligations arising from security incidents.
• Perform data review, impact assessments, and support decisions about affected individuals and organizations.
• Contribute to remediation planning and implementation, including process improvements and control enhancements.

Skills

Cyber incident response

Data breach response

Forensic analysis

Regulatory awareness

Written communication

Client relationship

Time management

Team mentorship

Education

Bachelor's or Master's in CS/IS/Engineering/Cybersecurity

GCFE/GCFA/CISA/CISM/CISSP/CCIM certifications

Job description

EY is seeking an experienced Senior to lead client engagements involving cyber incidents, data breaches, and information security events. This role focuses on post-incident response, helping clients assess impacted data, evaluate regulatory obligations, coordinate remediation, and manage stakeholder communications.

You will work with cross-functional teams across cybersecurity, privacy, legal, and compliance to drive effective incident response, lessons learned, and client outcomes in a