Director, Cybersecurity, Cyber Resilience

Responsibilities

• Lead and deliver end-to-end cyber resilience transformation programmes, managing scope, quality, timeline, and budget.
• Design and facilitate cyber crisis simulations and tabletop exercises for executive and operational teams.
• Act as a "crisis conductor" to guide senior leaders through high-pressure decision-making during simulated or real incidents.
• Integrate cyber response and recovery into wider enterprise resilience plans, including business continuity and IT disaster recovery.
• Partner with C-suite and functional leaders (CIO, CISO, COO, Risk, Legal) to strengthen organizational readiness.
• Develop capability roadmaps and investment cases to reduce time-to-detect and time-to-recover for critical services.
• Shape the cyber resilience market offering through business development, proposals, and thought leadership.
• Lead, coach, and mentor a high-performing team of cyber resilience professionals.

Requirements

• Proven experience leading cyber resilience, incident readiness, or crisis management programmes.
• Strong track record of designing and facilitating cyber crisis simulations for senior stakeholders.
• Experience building or enhancing incident response and recovery operating models (governance, playbooks, and processes).
• Ability to embed cyber capabilities into broader business resilience frameworks such as BCP and operational resilience.
• Robust knowledge of security and resilience frameworks and regulations (e.g., NIST CSF, NIS/NIS2).
• Exceptional stakeholder management skills with the ability to advise at the Board and Executive level.

Preferred Qualifications

• Security-related certifications such as CISSP, CISM, CISMP, or CIISEC.
• Experience operating within an NCSC Assured Cyber Consultancy.
• Sector-specific experience in Government, Energy, Retail, Life Sciences, Telecoms, or Transport.
• Previous experience in professional services delivering cybersecurity solutions.

Benefits

• Competitive remuneration package based on individual and team performance.
• Flexible working options through the FlexEY programme.
• Continuous learning and professional development opportunities.
• A diverse and inclusive culture with transformative leadership support.

About the Company

EY is a global leader in professional services, dedicated to building a better working world. Our Cybersecurity Consulting Practice is a rapidly expanding global team of over 13,000 professionals delivering cutting-edge security transformation and resilience services.