Forensic and Integrity - Crisis and Investigation - Cyber Response Manager

EY • Atlanta, DC

1d • $89,100 - $185,500

About The Position

EY is seeking an experienced Manager to lead client engagements involving cyber incidents, data breaches, and information security events. The role focuses on the post-incident response phase, helping clients assess impacted data, evaluate legal and regulatory obligations, coordinate remediation activities, and manage stakeholder communications. The successful candidate will serve as a trusted advisor to clients and executive stakeholders while leading multidisciplinary teams through complex breach response and recovery efforts.

The position is available in McLean, Washington, New York, Hoboken, Iselin, Boston, Philadelphia, Atlanta, Charlotte, Chicago, Dallas, Houston, Los Angeles, San Francisco, and San Jose. The role may require travel and work beyond standard hours when necessary, as well as transportation to EY offices and client sites.

EY offers a comprehensive compensation and benefits package, including medical and dental coverage, pension and 401(k) plans, and paid time off. Its flexible vacation policy lets employees determine how much vacation time they need. Additional time off includes designated EY paid holidays, winter and summer breaks, personal and family care, and other leaves of absence.

Requirements

• Bachelor’s or master’s degree in computer science, information systems, engineering, cybersecurity, or a related field.
• 5 to 8 years of experience in cyber incident response, data breach response, digital forensics, privacy consulting, cybersecurity consulting, risk advisory, or related disciplines.
• Deep understanding of security threats, vulnerabilities, and incident response, including the ability to digest threat intelligence and apply it to client engagements.
• Basic understanding of legal matters surrounding electronic discovery and analysis.
• Strong understanding of privacy and data protection regulations, including notification and reporting requirements across multiple jurisdictions.
• Experience supervising engagement teams and reviewing work products.
• Strong written and verbal communication skills, including the ability to present complex information to executive-level stakeholders.
• Proven ability to lead teams and manage multiple concurrent engagements in a fast-paced environment.
• Excellent executive communication, stakeholder management, and client-facing consulting skills.
• Strong negotiation and influencing skills, and confidence communicating complex technical concepts to a wide range of audiences.
• Achieved or willingness to pursue related professional certifications such as GCFE, GCFA, GCIH, CISA, CISM, CISSP, or CCIM.
• Ability and willingness to travel and work in excess of standard hours when necessary.
• Reliable transportation to and from the EY office and client sites; a driver’s license is strongly recommended because rideshare and public transportation may not be available in all locations.
• Demonstrated integrity, ability to work independently and collaboratively under crisis conditions, and a global mindset for working with different cultures and backgrounds.
• Excellent social, communication, writing, organizational, and teaming skills, with strong attention to detail.
• Knowledge of business industry-standard security incident response processes, procedures, and lifecycle.

Nice To Haves

• Experience working with Fortune 500 companies.
• Experience in manufacturing, healthcare, energy, infrastructure, or the public sector.
• Experience working with domestic and international law enforcement in cyber incident response or related crisis management.

Responsibilities

• Lead end-to-end breach response engagements following incident containment and forensic investigation.
• Direct assessment and analysis of impacted data sets to determine potential exposure of sensitive, confidential, regulated, or personal information.
• Coordinate cybersecurity, privacy, legal, forensic, compliance, and client stakeholder teams.
• Advise clients on notification, regulatory, contractual, and reporting obligations arising from security incidents.
• Oversee data review, document analysis, impact assessments, and decisions related to affected individuals and organizations.
• Develop executive-level reports, client deliverables, regulatory submissions, and board-ready communications.
• Guide clients through remediation planning and implementation, including process improvements and control enhancements.
• Manage large-scale projects involving multiple workstreams, tight deadlines, and significant stakeholder engagement.
• Provide strategic counsel to client leadership during high-profile and business-critical incidents.
• Mentor and develop engagement teams while ensuring the quality and consistency of client deliverables.
• Oversee technical analyses and client deliverables, analyze investigative findings, and develop fact-based reports.
• Identify and articulate improvement opportunities and help drive lessons-learned activities.
• Coach, mentor, and develop staff and senior team members through active feedback and professional development.
• Identify opportunities to expand existing client relationships and support business development initiatives.
• Work across multidisciplinary teams, manage competing priorities, and leverage technology and innovation to enhance engagement delivery.

Benefits

• Medical coverage
• Dental coverage
• Pension plan
• 401(k) plan
• Flexible vacation policy
• Paid holidays
• Winter and summer breaks
• Personal and family care time off
• Other leaves of absence to support physical, financial, and emotional well-being

What This Job Offers

• Job Type: Full-time
• Career Level: Manager