E

Ernst & Young

Global professional services: consulting, assurance, tax

Forensics – Crisis and Investigations - Managed Services, Cyber Response Manager

Security Operations & Incident ResponsePosted on Nov 10
Full-time$89.1k - $185.5k

About the Job

Requirements

  • A bachelor's or master's degree in computer science, information systems, engineering, cybersecurity, or a related field is required.
  • Five to eight years of experience in cyber incident response, data breach response, digital forensics, privacy consulting, cybersecurity consulting, risk advisory, or related disciplines is required.
  • A deep understanding of security threats, vulnerabilities, and incident response is required, including the ability to digest threat intelligence and apply it to client engagements.
  • Familiarity with the legalities surrounding electronic discovery and analysis is required.
  • A strong understanding of privacy and data protection regulations, including notification and reporting requirements across multiple jurisdictions, is required.
  • Experience supervising engagement teams and reviewing work products is required.
  • Strong written and verbal communication skills are required, including the ability to present complex information to executive-level stakeholders.
  • The ability to lead teams and manage multiple concurrent engagements in a fast-paced environment is required.
  • Executive communication, stakeholder management, and client-facing consulting skills are required.
  • Strong negotiation and influencing skills, and the confidence to communicate complex technical concepts to varied audiences, are required.
  • The ability and willingness to travel and work beyond standard hours when necessary is required.
  • Reliable transportation to and from the EY office and client sites is required; a driver's license is strongly recommended because rideshare and public transportation may not be available in all locations.

Responsibilities

  • Lead end-to-end breach response engagements following incident containment and forensic investigation.
  • Direct the assessment and analysis of impacted data sets to determine potential exposure of sensitive, confidential, regulated, or personal information.
  • Coordinate cross-functional teams including cybersecurity, privacy, legal, forensic, compliance, and client stakeholders.
  • Advise clients on notification, regulatory, contractual, and reporting obligations arising from security incidents.
  • Oversee data review, document analysis, impact assessments, and decision-making related to affected individuals and organizations.
  • Develop executive-level reports, client deliverables, regulatory submissions, and board-ready communications.
  • Guide clients through remediation planning and implementation, including process improvements and control enhancements.
  • Manage large-scale projects involving multiple workstreams, tight deadlines, and significant stakeholder engagement.
  • Provide strategic counsel to client leadership during high-profile and business-critical incidents.
  • Mentor and develop engagement teams while ensuring quality and consistency of client deliverables.
  • Lead engagement teams and provide oversight of technical analyses and client deliverables.
  • Analyze findings in investigative matters and develop fact-based reports.
  • Identify and articulate opportunities for improvement while helping drive lessons-learned activities.
  • Apply analytical, project management, and problem-solving skills to engagement work.
  • Coach, mentor, and develop staff and senior team members through active feedback and professional development.
  • Identify opportunities to expand existing client relationships and support business development initiatives.
  • Work across multidisciplinary teams and manage competing priorities in a fast-paced environment.
  • Leverage technology and innovation to enhance engagement delivery and team effectiveness.
  • Apply emotional intelligence and remain calm under pressure.

Desired Qualifications

  • Experience working with Fortune 500 companies.
  • Experience in manufacturing, healthcare, energy, infrastructure, or the public sector.
  • Experience working with domestic and international law enforcement in cyber incident response or related crisis management.
  • Demonstrated integrity in a professional environment.
  • Ability to work independently and contribute to a cohesive team environment under crisis conditions.
  • A global mindset for working with different cultures and backgrounds.
  • Knowledge of business-industry-standard security incident response processes, procedures, and lifecycle.
  • Strong organizational skills, teaming skills, and attention to detail.
  • Achieved or willingness to pursue related professional certifications such as GCFE, GCFA, GCIH, CISA, CISM, CISSP, or CCIM.

About the Company

Ernst & Young

Global professional services: consulting, assurance, tax

EY (Ernst & Young) provides professional services at a global scale, offering consulting, assurance, tax, and transaction advisory services. It serves clients across industries such as technology, media, real estate, hospitality, and construction. Instead of selling a single product, EY works with clients through tailored engagements where cross-disciplinary teams analyze challenges, design strategies, perform audits, help with tax planning, and assist with mergers or divestitures. What sets EY apart is its worldwide reach and integrated service model, industry-specific expertise, and focus on responsible business practices like sustainability, cybersecurity, and workforce flexibility. EY’s goal is to help organizations improve performance, manage risk, and achieve sustainable growth while building a better working world.

Company size
5,001-10,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Boston, MA
Founded
1991

Recently Posted Jobs

Explore more opportunities at Ernst & Young

See more jobs