Cyber Defense Incident Responder - Associate Director

EY is seeking an Associate Director to lead cyber‑defense incident response within its Cyber & Investigative Services unit. The firm, a global professional services organization with 250,000 staff across more than 140 countries, relies on secure technology to support both internal operations and client‑facing solutions. The role sits in the Information Security business line and reports to senior leadership while collaborating with a range of internal and external partners. The incumbent will independently steer complex, worldwide cyber‑security incidents, often outside normal business hours, acting as the primary liaison between business units, legal, data‑privacy, risk teams, vendors and other information‑security groups. Responsibilities include managing the full incident lifecycle, overseeing critical projects, mentoring junior responders, and producing metrics and reports that inform leadership. The position also drives the creation and refinement of processes and documentation to ensure a scalable, consistent response capability and integrates the firm’s efforts with broader corporate incident‑management programs. Candidates must hold a bachelor’s or master’s degree in a relevant discipline and possess advanced expertise in incident response, forensic chain‑of‑custody, digital forensics, and cyber‑event analysis. Proven ability to coordinate high‑profile, global incidents, develop fact‑based reports, and communicate clearly in both written and verbal formats is essential. The role requires on‑call availability in a rotating schedule, strong diplomatic skills, and the capacity to make sound judgments under pressure. Additional strengths valued include comfort with ambiguity, an inquisitive analytical mindset, emotional intelligence, and experience in talent development. The position is based in London but is open to candidates located anywhere in the country, offering a competitive salary and the chance to contribute to EY’s mission of building a better working world.