Forensics - Crisis and Investigations - Cyber Response - Manager
$104.8k - $192.3kEY (Ernst & Young)
Job ID: 1433461233Location: McLean, VA, US, 22102Salary: $104,800 - $192,300Job Function: ForensicsEmployer: EY Global ServicesApply by: 2026-11-02Company: EYLocation: McLean, New York, Hoboken, Metropark, Boston, Philadelphia, Atlanta, Charlotte, Chicago, Dallas, Houston, Los Angeles, San Francisco, San JoseAt EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.The opportunityWe are seeking an experienced Manager to lead client engagements involving cyber incidents, data breaches, and information security events. This role focuses on the post-incident response phase, helping clients assess impacted data, evaluate legal and regulatory obligations, coordinate remediation activities, and manage stakeholder communications. The successful candidate will serve as a trusted advisor to clients and executive stakeholders while leading multidisciplinary teams through complex breach response and recovery efforts.Your key responsibilitiesLead end-to-end breach response engagements following incident containment and forensic investigation.Direct the assessment and analysis of impacted data sets to determine potential exposure of sensitive, confidential, regulated, or personal information.Coordinate cross-functional teams including cybersecurity, privacy, legal, forensic, compliance, and client stakeholders.Advise clients on notification, regulatory, contractual, and reporting obligations arising from security incidents.Oversee data review, document analysis, impact assessments, and decision-making related to affected individuals and organizations.Develop executive-level reports, client deliverables, regulatory submissions, and board-ready communications.Guide clients through remediation planning and implementation, including process improvements and control enhancements.Manage large-scale projects involving multiple workstreams, tight deadlines, and significant stakeholder engagement.Provide strategic counsel to client leadership during high-profile and business-critical incidents.Mentor and develop engagement teams while ensuring quality and consistency of client deliverables.Skills and attributes for successLead engagement teams and provide oversight of technical analyses and client deliverables.Analyze findings in investigative matters and develop fact-based reports.Ability to identify and articulate opportunities for improvement while helping drive lessons learned activities.Demonstrate strong analytical, project management, and problem-solving skills.Coach, mentor, and develop staff and senior team members through active feedback and professional development.Identify opportunities to expand existing client relationships and support business development initiatives.Work effectively across multidisciplinary teams and manage competing priorities in a fast-paced environment.Leverage technology and innovation to enhance engagement delivery and team effectiveness.Application of emotional intelligence and calm under pressure.To qualify for the role, you must haveA bachelor’s or master’s degree in computer science, information systems, engineering, cybersecurity or a related field.5 to 8 years of experience in cyber incident response, data breach response, digital forensics, privacy consulting, cybersecurity consulting, risk advisory, or related disciplines.Deep understanding of security threats, vulnerabilities, and incident response, to include the ability to digest threat intelligence and apply it to client engagements.Be familiar with a basic understanding of legalities surrounding electronic discovery and analysis.Strong understanding of privacy and data protection regulations, including notification and reporting requirements across multiple jurisdictions.Experience supervising engagement teams and reviewing work products.Strong written and verbal communication skills with the ability to present complex information to executive-level stakeholders.Proven ability to lead teams and manage multiple concurrent engagements in a fast-paced environment.Excellent executive communication, stakeholder management, and client-facing consulting skills.Strong negotiation and influencing skills, and the confidence to communicate complex technical concepts to a wide range of audiencesAchieved or be willing to pursue related professional certifications such as GCFE, GCFA, GCIH, CISA, CISM, CISSP, or CCIM.The ability and willingness to travel and work in excess of standard hours when necessary.Access to reliable transportation to/from the EY office and client sites. A driver's license is strongly recommended as ride share and public transportation options may not be available in all locations.Ideally, you’ll also haveExperience working with Fortune 500 companies.Experience in industries such as manufacturing, healthcare, energy, infrastructure, or the public sector.Experience working with law enforcement, both domestic and internationally, in the cyber incident response or related crisis management field.What we look forDemonstrated integrity in a professional environment.Ability to work independently, while also being able to contribute to a cohesive team environment under crisis conditions.Have a global mind-set for working with different cultures and backgrounds.Excellent social, communication, and writing skills.Knowledgeable in business industry standard security incident response process, procedures, and life cycle.Excellent organizational skills, teaming skills, and strong attention to detail.What we offer youAt EY, we’ll develop you with future-focused skills and equip you with world-class experiences. We’ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more.We offer a comprehensive compensation and benefits package where you’ll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job in all geographic locations in the US is $104,800 to $192,300. The base salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is $125,700 to $218,500. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.Join us in our team-led and leader-enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year.Under our flexible vacation policy, you’ll decide how much vacation time you need based on your own personal circumstances. You’ll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.Are you ready to shape your future with confidence? Apply today. EY accepts applications for this position on an on-going basis.For those living in California, please click here for additional information.EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities.EY | Building a better working worldEY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law. EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY’s Talent Shared Services Team (TSS) or email the TSS at View email address on click.appcast.io.
- ...areas of our business, and our global Cyber Investigation and Forensic Response (CIFR) practice is at the heart of... ...cyber incidents. Within CIFR, our Crisis Readiness practice helps... ...incident improvement.You Are:A crisis management leader with commanding executive presence...SuggestedWork experience placementLive inWork at officeLocal area
$112.8k - $257k
Cloud Cyber Incident Response ManagerThe Opportunity:Serve as a member of the cloud cyber incident... ...teams. Oversee complex digital forensic investigations and cybersecurity incident response... ...including responsibility for career management, employee development, performance...SuggestedFull timeContract workPart timeLocal areaRemote work- ...Suitability required) Company: Argo Cyber Systems, LLC - Service-... ...deliver rapid incident response, advanced forensics, and coordinated recovery... ...seeking a Cyber Incident Manager to lead onsite incident... ...capability that provides immediate investigation, containment, and recovery...SuggestedImmediate startShift work
- Solutions³ LLC is seeking an Incident Manager III to lead investigations for breach severity, develop mitigation plans, and assist with restoration... ...government customers and internal teams during onsite incident response, applying NIST/FISMA guidelines and CND concepts. Ideal...Suggested
- ...looking to hire an experienced Cyber Intelligence business... ...defense, application security and managed service solutions to rethink... ...Market Unit Lead.Responsibilities include:Lead and manage a North... ...charge, (b) in furtherance of an investigation, proceeding, hearing, or action...SuggestedContract workWork experience placementLive inWork at officeLocal area
- ...today's most sophisticated cyber threats - both known and unknown... ...of threat monitoring and managed Security Operations Center (... ...and Respond team, you will be responsible for… - Lead end-to-end... ...management, and complex incident investigation, mitigation, and remediation...Local areaVisa sponsorship
$104k - $166k
...experienced Incident Response Analyst (ICS/OT/SCADA)... ...its' Federal Strategic Cyber group. Location: On‑site... ...with technical teams, forensic analysts, and mission... ...incident reports to management and stakeholders.Work... ...adjudicated DHS background investigation.Desired Qualifications...Contract workCurrently hiringShift work1 day per week- ...A cybersecurity and intelligence firm is seeking a Cyber Eviction Analyst to support critical incident response missions. The role requires extensive expertise in threat actor tools, incident mitigation, and collaborative problem-solving. Ideal candidates will possess...
$136k - $184k
...candidate selected be a US Person.Key job responsibilities- You will query big data repositories... ...and provide direct support to ongoing investigations and efforts to identify and contain... ...developing innovative capabilities to identify cyber threat activities at scale.- Work...InternshipFlexible hoursShift work- ...Government customer by providing on-site incident response support and facilitating technology integration initiatives. The IT Requirements Manager will lead use-case identification, gather... ..., DHS suitability, and a track record in cyber operations or systems integration, with a...
- ...provide support for onsite incident response to civilian Government agencies... ...critical asset owners who experience cyber-attacks, providing immediate investigation and resolution. Contract personnel... ...They are seeking a Cyber Incident Manager to support this critical customer...Contract workImmediate startShift work
$134.5k - $265.1k
Position Summary Data Privacy ManagerAs a Manager in Deloitte’s Digital Trust & Privacy practice, you will lead the discovery,... ...management, privacy by design, privacy impact assessments, incident response, third-party risk, etc.Knowledge of Data Privacy Laws and...Local area- ...seeking a CSOC Tier 2 specialist to support 24x7 cyber incident response with malware analysis, forensic handling, and containment actions. You will coordinate... ...with SIEM, network protocols, and incident lifecycle management. 1 of 5 shifts is required. #J-18808-Ljbffr...Work at officeShift work
- ...Technology Group, Inc. (ATG) is seeking a CODE Program Manager (PM) to provide overall management and oversight of... ...activities supporting the Department of Defense Cyber Crime Center (DC3). The PM is responsible for the quality and efficiency of contractor performance...Contract workFor contractorsFor subcontractor
- ...Cloud Cyber Incident Response Manager The Opportunity: Serve as a member of the cloud cyber incident response leadership team, responsible... ...incident response teams. Oversee complex digital forensic investigations and cybersecurity incident response engagements across...Full time
- ...motivated, career and customer-oriented Cyber Incident Response Analyst to join our team in McLean,... ...and Monitoring Incident Analysis and Investigation Incident Response and Mitigation Threat Intelligence and Vulnerability Management Reporting and Documentation Minimum...Shift workNight shiftDay shiftAfternoon shift
- ...Description Job Description Cyber Network Defense Analyst (CNDA) Level III - Forensics Location: Remote / Onsite (as... ...teams provide rapid incident response, digital forensics, proactive hunt... ...response, and immediate investigation and resolution using host-based...Immediate startRemote work
- ...hunting, rapid onsite incident response, and immediate investigation and resolution using host... ...response for digital forensics/incident response (DFIR)... ...hunting for malicious cyber activity. We are seeking... ...Overview Business Computers Management Consulting Group, LLC (...Local areaImmediate startRemote workFlexible hours
- ...Description Job Description Cyber Threat intelligence... ...teams deliver rapid incident response, advanced forensics, and coordinated recovery... ...customer's vulnerability management (VM) efforts. In support of... ...relevant sources into investigative or analytical products...Shift work
- ...Description Job Description Cyber Network Defense Analyst (CNDA) - Cloud Forensics Location: Remote /... ...rapid incident response, digital forensics,... ...CNDA will lead advanced investigations into sophisticated intrusions... ..., or Azure Resource Manager for automation and...Remote work
- ...Are you passionate about shaping the cyber and organizational risk posture of leading... ...the cyber security services marketplace. Managing our industry-leading services requires significant... ...on the Cyber Foundry team, you will be responsible for providing senior leadership across a...Local areaVisa sponsorship
- ...cybersecurity services across strategy, risk management, digital identity, cyber defense, and managed security.... ...Director, you will be responsible for leading and managing complex information... ...charge, (b) in furtherance of an investigation, proceeding, hearing, or action,...Work experience placementLive inWork at officeLocal area
$134.5k - $265.1k
...professional looking to help organizations reduce cyber risk and improve resilience? At Deloitte... ...& Resilience Continuous Threat Exposure Management (CTEM) team to help clients identify,... ...Management (CTEM) team, you will be responsible for:• Manage exposure-based remediation...Local area$99k - $225k
Cyber Physical Defense, LeadThe Opportunity: Lead Cyber Physical... ...channel pursuits. Will be responsible for identifying potential clients... ...Have:Experience building, managing, and expanding cyber... ...will be subject to a security investigation and may need to meet eligibility...Full timeContract workPart timeLocal areaRemote work- ...protect and grow their business by delivering risk management solutions across critical domains, including cyber. Within that environment, this role leads the... ...Services on the Cyber Operate team, you will be responsible for: - Lead end-to-end delivery of Identity and Access...Contract workLocal areaVisa sponsorship
- ...adoption, and security operations enhancements.Demonstrate how Microsoft Sentinel and Defender XDR support advanced monitoring and response.Create presentations, proposals, and workshop materials for SOC transformation initiatives.Collaborate with sales, alliances,...
- ...cybersecurity services across strategy, risk management, digital identity, cyber defense, and managed security.... ...and Accenture stakeholders.Key Responsibilities:Collaborate with client... ...charge, (b) in furtherance of an investigation, proceeding, hearing, or action,...Work experience placementLive inWork at officeLocal areaRemote work
- A cybersecurity firm in Arlington, VA is seeking an Incident Manager II to support a U.S. Government client in incident response and cyber investigations. The ideal candidate will have over 2 years of experience in cyber incident management, an active TS/SCI clearance,...
$64k - $128k
...technically advanced full-spectrum cyber, data operations, systems... ...provide rapid deployment and management of secure cloud-based engagement kits for cyber incident response and threat hunting operations... ...environments they need to investigate cyber threats affecting federal...Contract workLocal area- ...Solutions³ LLC is hiring an Incident Manager II in Arlington, VA to support government clients in cyber incident response. The role involves researching and mitigating cyber threats, conducting analyses, and collaborating across teams. Requires 2+ years in incident management...
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Forensics - Crisis and Investigations - Cyber Response - Manager. Be the first to apply!




