Cybersecurity Investigations Specialist

At EY, you are invited to cultivate a remarkable career backed by global support, an inclusive culture, and cutting-edge technology aimed at unlocking your potential. We prioritize your unique perspective as a vital contribution to EY's continuous improvement. Join us to enhance your career experience while fostering a better working world for all. The Exceptional EY Experience Awaits You. We uphold exemplary ethical standards and integrity among our employees, expecting all candidates to embody these principles. In our information-driven era, data is immensely valuable. It is crucial to protect information and information systems for our ongoing operations, with every member of EY's Information Security team playing an indispensable role. Join a global team of nearly 950 professionals collaborating to safeguard both EY and client information assets. Our Information Security experts enable EY to operate securely, deliver secure products and services, and respond promptly to security events, thereby preserving the EY brand and enhancing client trust. Within Information Security, we integrate risk strategy, digital identity, cyber defense, application security, and technology solutions while addressing the entire security lifecycle. You will be part of a devoted team of security-focused professionals tasked with developing innovative and secure solutions that drive business value and expedite market readiness. The Opportunity The Internal Investigations Services (IIS) team is responsible for managing cybersecurity incidents involving EY personnel, contractors, and associates globally. The IIS team also conducts computer forensic reviews and handles eDiscovery requests to assist the General Counsel. The Cybersecurity Investigations Specialist will lead technical investigations, concentrating on information gathering, analysis, and reporting to support digital forensic investigations. Your Key Responsibilities • Lead security investigations and eDiscovery matters. • Prepare technical reports summarizing facts and events during specific investigation periods, sharing findings with key stakeholders. • Advise stakeholders on the significance of information gathered from diverse sources relating to information security matters, digital forensic inquiries, and investigative efforts. • Identify opportunities for improving IIS processes and protocols. Skills and Attributes for Success • In-depth technical knowledge (IT infrastructure, forensic tools, methodologies). • Strong investigative mindset paired with analytical and problem-solving skills. • Ability to interpret data from various sources to gain a comprehensive understanding. • Efficiently manage multiple tasks in a dynamic environment while respecting confidentiality and local privacy laws. • Adaptable to shifting demands and capable of thriving in an uncertain, fast-paced setting. • A global outlook that effectively engages with diverse cultures and backgrounds. • Excellent teamwork skills with a strong capacity to enhance understanding of security policies. • Knowledge of current and emerging legal regulations in information security (e.g., data privacy). • Effective and flexible communication style. • Proven integrity and sound judgment in professional contexts. • Collaborative approach when working in a global environment. • Experience in investigation case management. • A solid background in information security, capable of effective communication with both technical and non-technical teams. • Able to balance work obligations and personal priorities. • Understanding of the Big 4 workplace culture and structure. • Interviewing skills with an investigative focus, supporting GCO from a technical perspective. Other Requirements: Weekend availability may be required. To Qualify for the Role You Must Have: Education: Bachelor's or Master's Degree in Computer Science or a relevant field. Experience: • 5-10 years of experience in one or more of the following areas: • Information Security, demonstrating expertise in investigative units and incident response. • Deep knowledge of cyber investigations, forensic tools, and methodologies (including log correlation and analysis). • Familiarity with legal frameworks related to the discovery and analysis of electronically stored information. • Experience using forensic tools such as Nuix, Axiom, and more. • Proficient in Microsoft Defender and other monitoring tools. • Familiarity with the Microsoft environment (Exchange, SharePoint, Purview, Sentinel, Azure). • Subject Matter Expert knowledge of Microsoft Purview. • Experience with PowerShell. Experience in Reporting to Senior Leadership Certification Requirements: Candidates should hold or actively pursue relevant professional certifications like CISSP, Security+, EnCE, ACE, GCFE, or GCIA. Ability to obtain and maintain Security Clearance if assigned in the U.S. Ideally, You'll Also Have: • Certifications that demonstrate interest in and development of soft skills. What We Look For Recognizing the impact and risks associated with data security incidents, you will adeptly manage requests and concerns. What We Offer You • We provide a comprehensive compensation and benefits package that rewards performance and recognizes your valuable contributions. The base salary range for this position across all U.S. locations is $128,100 to $239,600. Specific areas like New York City Metro, Washington State, and California (excluding Sacramento) have a range of $153,800 to $272,300. Individual salaries vary based on factors such as education, experience, skills, and geographic location. Additionally, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and various paid leave options. • Join us in a model that embraces both team-led and leader-enabled hybrid arrangements, with expectations for most external client services to be conducted in person 40-60% of the time during engagements or projects throughout the year. • Under our flexible vacation policy, you determine the amount of vacation time that suits your personal needs, in addition to designated EY-paid holidays, winter/summer breaks, personal/family care, and leaves of absence to support your overall well-being. Are You Ready to Shape Your Future with Confidence? Apply Today! EY continuously accepts applications for this position. EY is committed to providing equal employment opportunities to all applicants and employees, without discrimination based on race, color, religion, age, sex, sexual orientation, gender identity or expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis. EY | Building a Better Working World EY is dedicated to creating a better working world through generating new value for clients, people, society, and the planet, while fostering trust in capital markets. Empowered by data, AI, and advanced technology, EY teams assist clients in shaping their futures confidently while addressing today’s and tomorrow’s pressing challenges. EY teams operate across a full spectrum of services in assurance, consulting, tax, strategy, and transactions, delivering services in over 150 countries and territories. EY is committed to offering reasonable accommodation for qualified individuals with disabilities, including veterans. For assistance with the online application process or to request an accommodation, please contact our Talent Shared Services Team.