Cyber Defense Incident Responder – Associate Director

Overview

In this role you coordinate global cybersecurity incident responses, guiding complex events from detection to resolution. You’ll work with cross-functional teams across EY’s cyber and information security ecosystem to ensure consistent, scalable response operations. You’ll lead process improvements, mentor junior staff, and report metrics to leadership, helping EY strengthen its incident response capabilities at a worldwide scale. This is a high-impact position for someone who thrives under pressure and communicates clearly with diverse stakeholders.

Pay / Benefits

• flexible environment
• diverse and inclusive culture
• globally connected teams

Responsibilities

• Coordinate complex, global cybersecurity incident response efforts, including after-hours scenarios
• Liaise with business units, Information Security teams, GC, Data Privacy, and Risk Management to manage relationships
• Drive integration with corporate incident management programs for consistency across IT
• Oversee critical CIS projects and mentor junior team members
• Lead process and documentation improvements for scalable response operations
• Develop and deliver metrics on operational performance of the incident response process
• Draft communications and provide timely updates to leadership during incidents
• Own and oversee related process documentation and on-call rotation
• Prepare for on-call off-hours responsibilities

Key requirements

• 10+ years in Information Security or related fields
• 5+ years in SOC/Threat Intelligence or related cyber defense functions
• 3+ years in DFIR/Incident Response leadership roles
• Bachelor’s or Master’s Degree in a relevant field; equivalent experience considered
• Deep knowledge of incident response lifecycle, forensics, and regulatory considerations globally

• Strong communication (verbal and written)
• Diplomacy and stakeholder management
• Integrity and judgement under pressure
• Incident response lifecycle mastery
• Forensics and DFIR tools and methodologies
• Log analysis and malware identification

…