Senior Manager – DSO – UK Data Incident Investigations Lead

Overview

As Senior Manager, you will lead the operational delivery of the Data Incident & Investigation capability, coordinating triage, investigations and escalations across the incident lifecycle. You’ll drive consistent execution to defined standards and translate insights into improvements. You will collaborate with Data Protection, Forensic, Talent, and Infosec teams to ensure structured incident handling. This role sits at the center of EY’s security transformation, with opportunities to shape governance and incident response at scale.

Pay / Benefits

• flexible working
• career development
• Total Rewards package
• FlexEY benefits (holidays, health and well-being, insurance, savings)
• discounts and promotions

Responsibilities

• Receive and manage referrals of suspected data incidents and ensure consistent information capture in the incident management system
• Log, track and maintain triage workflows across multiple concurrent incidents
• Conduct assessments, interviews and investigations to inform escalation decisions
• Coordinate with Data Protection, Forensic, Talent, Infosec teams with clear escalation pathways
• Produce and maintain standard incident reporting MI and ensure documentation quality
• Ensure timely escalation according to thresholds and criteria
• Maintain audit-ready documentation and traceability of decisions, evidence and handoffs
• Identify and mitigate security risks and communicate solutions to project teams
• Provide business guidance on information governance and participate in training and awareness
• Ensure internal policies are maintained and risk assessments are conducted

Key requirements

• Professional experience delivering triage, incident management or equivalent risk-based workflow
• Experience interviewing insider risk actors across digital and human domains
• Incident investigation training or certification (e.g., GIAC Incident Handler)
• Experience producing structured reporting/MI and disciplined documentation
• Experience in a professional services firm or complex matrix organisations (beneficial)
• Passion for security and technology and problem solving
• Motivation and willingness to continuous learning
• UK national or residency with five years in the UK and compliance with Security Check requirements

• Professional demeanour
• Credibility and quickest expertise demonstration
• Strong incident coordination under pressure
• Information security principles
• Familiarity with Microsoft 365
• Ability to review and analyse security-related data (event logs, authentication logs)

…