Director, Cybersecurity, Cyber Resilience, TC, UKI

Overview

At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

Job Title:
Director – Cybersecurity – Cyber Resilience

At EY, we are committed to building a better working world. Our Cybersecurity Consulting Practice is rapidly expanding, and we are investing in our capabilities to meet the increasing demand for cybersecurity solutions. Join us and be part of a global team of over 13,000 professionals dedicated to delivering cutting-edge security transformation programs and services.

As a Director in Cybersecurity – Cyber Resilience, you will bring diverse perspectives and deep subject‑matter expertise to deliver high‑quality insights and outcomes for our clients. You will play a strategic leadership role in shaping and overseeing complex cybersecurity resilience engagements, strengthening senior client relationships, and guiding teams to develop innovative, practical solutions that help build greater resilience into their businesses.

• Lead and deliver cyber resilience transformation programmes, owning end-to-end engagement delivery (scope, quality, timeline, budget) and ensuring outcomes measurably improve preparedness, response, and recovery.
• Design, run, and continuously enhance cyber crisis simulations and tabletop exercises for executives and operational teams—ensuring scenarios reflect the current threat landscape, sector trends, and the client’s critical business services.
• Act as an outstanding facilitator and “crisis conductor”: guide senior leaders through high-pressure decision making, inject realistic developments, challenge assumptions, and drive clear actions, owners, and lessons learned.
• Translate threat intelligence and emerging attacker tactics into practical resilience improvements—linking likely threats to business impact, critical dependencies, and control or capability gaps.
• Integrate cyber response and recovery into wider enterprise resilience plans, including business continuity, IT disaster recovery, operational resilience, third-party resilience, and enterprise risk management—ensuring cyber is embedded, not bolted on.
• Partner with C-suite and functional leaders (CIO, CISO, COO, Risk, Legal, Comms, HR, Ops) to strengthen organisational readiness, clarify risk appetite, and improve cross-functional coordination during incidents.
• Build capability roadmaps and investment cases for resilience (people/process/technology), prioritising initiatives that reduce time-to-detect, time-to-respond, and time-to-recover for critical services.
• Shape and grow a cyber resilience offering: originate opportunities, develop proposals, create market-facing materials, and contribute thought leadership aligned to evolving resilience and regulatory expectations.
• Lead, coach, and inspire a high-performing cyber resilience team—developing facilitation skills, incident leadership, scenario design expertise, and client advisory confidence.

• Exceptional facilitator and communicator—able to run engaging, high-impact workshops and crisis simulations, influencing senior audiences across business, technology, and risk.
• Deep understanding of the cyber threat landscape and attacker behaviours, with the ability to convert threat insight into relevant scenarios, decision points, and resilience improvements.
• Strong resilience practitioner mindset: comfortable operating in ambiguity, steering complex stakeholder groups, and driving structured outcomes under time pressure.
• Strategic problem solver—able to diagnose resilience gaps, design pragmatic target-state capabilities, and secure executive buy-in by linking cyber resilience to business continuity and critical service delivery.
• Experienced programme and engagement leader—able to structure and manage large, complex initiatives and deliver measurable resilience outcomes.
• Commercially astute and quality-driven—balancing pace with rigour, managing delivery risk, and protecting client and firm reputation.
• Collaborative…