Forensics and Integrity Services-Crisis and Investigations-Cyber Threat Intelligence-Senior Manager

Location:

Chicago, Philadelphia, Atlanta, Charlotte, Houston, Dallas, New York, Hoboken, Iselin, McLean, District of Columbia, Los Angeles, Boston

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

Despite the best efforts of compliance, legal, risk, security and information technology departments, organizations in crisis face uncertainty when disruption occurs. Clients call upon EY to deploy multidisciplinary teams of former law enforcement officers, forensic accountants, compliance professionals and technology specialists to coordinate response activities and timelines, collect critical information and business intelligence, investigate suspicious activity, summarize procedures and outcomes, and streamline communications and reporting during critical business events.

EY’s Forensic & Integrity Services practice advises corporations and government clients on complex matters requiring crisis management, fact-based and digital investigations, insider threat services, crisis and incident preparedness, and threat intelligence. As Senior Manager, Cyber Threat Intelligence, you will play a key role in the growth and operation of the Crisis & Investigations Managed Services solution by leading a scalable threat intelligence capability supporting cyber breach, forensic investigation and remediation matters.

You will direct multidisciplinary teams and establish repeatable intelligence requirements, analytical workflows, quality standards, products and reporting across multiple client matters. You will work with forensic and incident-response professionals, client executives, legal counsel, security teams and other stakeholders to translate threat information into timely, practical and actionable insights.

• Lead the strategy, delivery, quality and continuous improvement of the cyber threat intelligence service across breach investigations and incident-response engagements.

• Establish repeatable processes for intelligence requirements, collection, source evaluation, analysis, quality review, dissemination, feedback and knowledge retention.

• Identify and assess intelligence relevant to cybercriminal threat actors, behaviors, tactics, techniques and procedures, infrastructure and evolving threat activity.

• Work with forensic and incident-response professionals to define intelligence requirements and inform investigative priorities, containment considerations and remediation planning.

• Translate relevant findings into actionable insights for engagement teams, client executives, legal professionals and technical stakeholders.

• Develop standardized and configurable threat assessments, intelligence notes, executive briefings and reporting packages.

• Maintain analytical standards that distinguish facts, assumptions, intelligence judgments and confidence levels, preserving the distinction between intelligence assessments and forensic conclusions.

• Coordinate concurrent intelligence requirements across client matters and monitor service performance, responsiveness, quality and risk.

• Use data, AI, threat intelligence technology, structured workflows and knowledge repositories appropriately to improve efficiency and scalability.

• Capture lessons learned, threat patterns and reusable knowledge while respecting confidentiality and information-sharing restrictions.

• Build productive relationships across cybersecurity, law-enforcement, government and private-sector communities to support responsible information exchange.

• Support breach readiness, retainers, exercises, proposals, market activity and thought…