锦鲤求职岗位描述
Assurance - Forensic & Integrity Services - Cyber Incident Response - Senior/Manager - Ernst & Young - Hong Kong
At EY, we’re all in to shape your future with confidence.
We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.
Join EY and help to build a better working world.
The Opportunity
As a Senior within EY Forensic & Integrity Services, you will join our Cyber Incident Response team and support organizations in responding to cyber incidents and technology-related investigations. Working alongside experienced cyber incident response and digital forensics professionals, you will help clients assess the nature and impact of cyber events, support cyber breach investigations, coordinate response activities, and assist with recovery efforts following cyber incidents.
You will gain exposure to a wide range of cyber incident scenarios, including ransomware attacks, data breaches, insider threats, unauthorized system access, and other cybersecurity events. The role provides the opportunity to work closely with client stakeholders across technology, legal, risk, compliance, and business functions while developing practical experience in cyber investigations, digital forensics, incident response, and cyber recovery.
Your Key Responsibilities
Support cyber incident response engagements involving cyber breaches, ransomware attacks, data exfiltration, insider threats, unauthorized system access, and other cybersecurity events.
Support engagement teams during live cyber incidents by assisting with situation assessment, issue tracking, stakeholder coordination, and response activities.
Assist with digital forensic investigations, including evidence preservation, forensic imaging, forensic data collection, log analysis, timeline reconstruction, root cause assessment, and analysis of potential data compromise or exfiltration.
Perform forensic analysis across endpoints, servers, cloud environments, mobile devices, email systems, and other relevant technology platforms to help determine the scope and impact of cyber incidents.
Assist in assessing the nature and extent of compromised systems, accounts, and data to support containment, eradication, recovery, and remediation activities.
Conduct cyber incident impact assessments, including analysis of operational, regulatory, financial, and reputational implications.
Support clients in determining whether sensitive, personal, confidential, or regulated data has been accessed, compromised, or exfiltrated.
Develop incident reports, executive briefings, action trackers, investigation findings, presentations, and other client deliverables.
Work closely with client stakeholders including Legal, Risk, Compliance, Communications, Privacy, Human Resources, Information Security, and Technology functions throughout incident response and recovery activities.
Support post-cyber incident reviews, root cause assessments, and lessons learned activities to identify opportunities for strengthening cyber security and incident response capabilities.
Manage workstreams and support project delivery to ensure engagements are delivered on time and to a high-quality standard.
Skills and Attributes for Success
Strong interest in cyber incident response, digital forensics, cyber investigations, information security, or technology risk.
Strong analytical and problem-solving skills, with the ability to assess technical issues and develop practical recommendations.
Ability to translate technical findings into clear and concise communications for both technical and non-technical audiences.
Excellent written and verbal communication skills.
Ability to perform effectively in dynamic and high-pressure environments.
Strong attention to detail and ability to analyse large volumes of information.
Strong stakeholder management and interpersonal skills.
Ability to manage multiple priorities and work collaboratively within diverse teams.
To qualify for the role you must have
Approximately 2 to 5 years of relevant experience in cyber incident response, digital forensics, cyber investigations, cybersecurity, technology risk, information security, or related disciplines.
Experience supporting cyber incident response engagements involving ransomware attacks, data breaches, unauthorized access incidents, insider threats, or other cybersecurity events.
Experience supporting digital forensic investigations, including evidence preservation, forensic imaging, log analysis, root cause investigations, and assessment of potential data compromise.
Experience preparing investigation reports, incident updates, presentations, and stakeholder communications relating to cyber incidents.
Experience working with stakeholders across Information Security, Technology, Risk, Legal, Compliance, Privacy, or other business functions.
Working knowledge of cyber security and cyber incident response frameworks and standards such as ISO 27001 (Information Security Management Systems), ISO/IEC 27035 (Information Security Incident Management), or similar, but not mandatory.
Professional certifications such as Security+, GCIH, GCFA, CHFI, EnCE, CISM, CISSP, or equivalent would be advantageous.
What we offer you
At EY, we’ll develop you with future-focused skills and equip you with world-class experiences. We’ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more.
Are you ready to shape your future with confidence? Apply today.
To help create an equitable and inclusive experience during the recruitment process, please inform us as soon as possible about any disability-related adjustments or accommodations you may need.
EY | Building a better working world
EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.
Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.
EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.