Incident Response Manager, Cybersecurity

About the role

EY is hiring an Incident Response Manager within its cybersecurity practice. You will join an international team of specialists that helps clients with complex information security needs and contributes to their business resilience. Working with a team of cyber security experts, you will lead, manage and deliver incident response engagements, helping clients respond to cyber security incidents during emergencies.

Key responsibilities

• Work with clients across different industries and with the EY team to address concerns about potential and actual breaches of technology, business systems and information assets.
• Collaborate with clients' IT teams to respond to cyber security breaches, including deploying Endpoint Detection and Response (EDR) tools, collecting system artefacts, reconstructing event timelines and containing incidents.
• Inspire, manage and lead a team of experienced security consultants on digital forensic investigations and incident response engagements in complex environments.
• Lead and manage incident response measures so threats are accurately assessed, contained, mitigated and reported.
• Oversee the monitoring, analysis and triaging of security events.
• Identify and propose realistic solutions and improvements, and develop innovative solutions for local and international client engagements.
• Support business development opportunities across existing and future client work.
• Manage project budgets while balancing quality outcomes, timeframes and budget.

Required profile

• Recognized university degree in Computer Science or Computer/Electrical Engineering.
• Prior consulting experience and at least 5 years of IT security and risk experience in a consulting environment.
• Significant experience in digital forensics, incident response, business development, client relationship management and team management.
• Experience covering advisory, implementation and operations.
• Professional certifications such as CISSP, CRISC, CISA, CISM, GCIH, GCFA, GCFE, GREM or other relevant qualifications.
• Excellent written and oral communication skills, able to present to technical and non-technical audiences.

Required skills

• Practical knowledge of one or more information security domains: Security Operations and Monitoring, Digital Forensics, Security Incident Management and Response, Identity and Access Management, Vulnerability Management, Cloud Security, DevSecOps.
• Understanding of EDR technologies such as Microsoft ATP, CrowdStrike Falcon, VMware Carbon Black and Sentinel.
• Good knowledge of information security principles, techniques and standards, and of new developments in cyber services.

What we offer

• A competitive remuneration package linked to individual and team performance.
• Flexible working arrangements considered.
• Continuous learning, coaching and leadership development.
• An inclusive, diverse culture.