Senior Incident Command Lead – Cross-Functional Response

EY; San Francisco (CA); Hybrid; USD 125,800 - 218,500; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off

Job summary

EY seeks a Lead Incident Response Coordinator to serve as the central point for coordinating operational, cybersecurity, infrastructure, connectivity, monitoring, and service-impacting incidents.

The role leads incident command activities, coordinates cross-functional response efforts, manages communications and escalations, tracks resolution actions, and helps ensure timely service restoration while maintaining accountability and stakeholder awareness.

Qualifications

• Bachelor's degree or equivalent experience preferred.
• 6+ years in incident management or cross-functional coordination roles.
• Strong communication, facilitation and decision-support skills.
• Ability to coordinate technical teams without performing all remediation.

Responsibilities

• Serve as the lead coordinator for incidents and major operational events requiring cross-functional response.
• Establish incident command structure, response rhythm, and ownership during active incidents.
• Coordinate response activities across technical, operational, cybersecurity, vendor, and stakeholder teams.
• Assign, confirm, and track incident actions through restoration and closure.
• Ensure response activities align to incident priority, business impact, and restoration objectives.
• Coordinate incident communications with leadership and stakeholders.
• Maintain incident action logs, recovery tasks, and blockers.
• Support post-incident reviews and continuous improvement.

Skills

Incident command

Service restoration

Stakeholder communications

Action tracking

Escalation management

Executive updates

Education

Bachelor's degree in IT, cybersecurity, engineering, or business

Job description

EY seeks a Lead Incident Response Coordinator to serve as the central point for coordinating operational, cybersecurity, infrastructure, connectivity, monitoring, and service-impacting incidents.

The role leads incident command activities, coordinates cross-functional response efforts, manages communications and escalations, tracks resolution actions, and helps ensure timely service restoration while maintaining accountability and stakeholder awareness.