Senior Cyber Incident Response & Forensics Lead

EY; Washington (District of Columbia); On-site; USD 72,000 - 135,000; Full time

Job summary

EY is seeking an experienced Senior to lead client engagements involving cyber incidents, data breaches, and information security events. The role focuses on post-incident response, helping clients assess impacted data, regulatory obligations, remediation activities, and stakeholder communications.

Responsibilities include end-to-end breach response, data impact assessments, cross-functional collaboration, and guiding regulatory and reporting obligations arising from security incidents.

Qualifications

• Bachelor's or Master's degree in computer science, information systems, engineering, cybersecurity or related field.
• 2+ years of experience in cyber incident response, data breach response, digital forensics, privacy consulting, cybersecurity consulting, risk advisory, or related disciplines.

Responsibilities

• Lead client engagements involving cyber incidents, data breaches, and information security events, focusing on post-incident response.
• Assess impacted data and regulatory obligations, coordinate remediation, and manage stakeholder communications.
• Coordinate with cross-functional teams including cybersecurity, privacy, legal, forensic, compliance and client stakeholders.

Skills

Cyber incident response

Data breach response

Digital forensics

Privacy consulting

Cybersecurity consulting

Risk advisory

Regulatory awareness

Communication skills

Project management

Client relationship building

Education

Bachelor's or Master's in computer science, information systems, engineering, cybersecurity or related field

Job description

EY is seeking an experienced Senior to lead client engagements involving cyber incidents, data breaches, and information security events. The role focuses on post-incident response, helping clients assess impacted data, regulatory obligations, remediation activities, and stakeholder communications.

Responsibilities include end-to-end breach response, data impact assessments, cross-functional collaboration, and guiding regulatory and reporting obligations arising from security incidents.