Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Lead cyber resilience transformation programmes and enhance crisis management strategies.
- Company: Join EY, a global leader in cybersecurity consulting.
- Benefits: Competitive salary, flexible working, health benefits, and continuous learning opportunities.
- Why this job: Make a real impact on businesses by enhancing their cyber resilience.
- Qualifications: Proven experience in cyber resilience and crisis management required.
- Other info: Be part of a diverse team committed to building a better working world.
The predicted salary is between 72000 - 108000 ÂŁ per year.
Lead and deliver cyber resilience transformation programmes, owning end-to-end engagement delivery (scope, quality, timeline, budget) and ensuring outcomes measurably improve preparedness, response, and recovery.
Responsibilities
- Design, run, and continuously enhance cyber crisis simulations and tabletop exercises for executives and operational teams—ensuring scenarios reflect the current threat landscape, sector trends, and the client's critical business services.
- Act as an outstanding facilitator and "crisis conductor": guide senior leaders through high-pressure decision making, inject realistic developments, challenge assumptions, and drive clear actions, owners, and lessons learned.
- Translate threat intelligence and emerging attacker tactics into practical resilience improvements—linking likely threats to business impact, critical dependencies, and control or capability gaps.
- Integrate cyber response and recovery into wider enterprise resilience plans, including business continuity, IT disaster recovery, operational resilience, third-party resilience, and enterprise risk management—ensuring cyber is embedded, not bolted on.
- Partner with C-suite and functional leaders (CIO, CISO, COO, Risk, Legal, Comms, HR, Ops) to strengthen organisational readiness, clarify risk appetite, and improve cross-functional coordination during incidents.
- Build capability roadmaps and investment cases for resilience (people/process/technology), prioritising initiatives that reduce time-to-detect, time-to-respond, and time-to-recover for critical services.
- Shape and grow a cyber resilience offering: originate opportunities, develop proposals, create market-facing materials, and contribute thought leadership aligned to evolving resilience and regulatory expectations.
- Lead, coach, and inspire a high-performing cyber resilience team—developing facilitation skills, incident leadership, scenario design expertise, and client advisory confidence.
- Exceptional facilitator and communicator—able to run engaging, high-impact workshops and crisis simulations, influencing senior audiences across business, technology, and risk.
- Deep understanding of the cyber threat landscape and attacker behaviours, with the ability to convert threat insight into relevant scenarios, decision points, and resilience improvements.
- Strong resilience practitioner mindset: comfortable operating in ambiguity, steering complex stakeholder groups, and driving structured outcomes under time pressure.
- Strategic problem solver—able to diagnose resilience gaps, design pragmatic target-state capabilities, and secure executive buy-in by linking cyber resilience to business continuity and critical service delivery.
- Experienced programme and engagement leader—able to structure and manage large, complex initiatives and deliver measurable resilience outcomes.
- Commercially astute and quality-driven—balancing pace with rigour, managing delivery risk, and protecting client and firm reputation.
- Collaborative leader—builds trusted relationships, develops talent through coaching and mentoring, and fosters a culture of continuous learning and accountability.
- Confident advisor at board/exec level—able to discuss governance, risk appetite, crisis communications, regulatory considerations, and operational resilience expectations.
- Strong market access and trusted relationships, leveraging established sector networks and senior-level contacts to originate opportunities, shape market conversations, and strengthen the firm's position with key decision-makers.
Qualifications
To Qualify for the Role, You Must Have
- Proven experience leading cyber resilience, incident readiness, and/or crisis management programmes—demonstrating tangible improvements in preparedness, response effectiveness, and recovery capability.
- Strong track record designing and facilitating cyber crisis simulations and tabletop exercises for senior stakeholders, including scenario development, exercise delivery, and after-action reporting with actionable remediation plans.
- Experience building or enhancing incident response and recovery operating models: governance, roles, processes, playbooks, communications, and integration with ITDR/BCP.
- Demonstrable ability to embed cyber into wider business resilience frameworks (e.g., business continuity, operational resilience, third-party resilience) and align cyber capabilities to critical business services and impact tolerances.
- Ability to develop compelling investment cases and prioritised roadmaps for resilience capability uplift, aligned to organisational goals and risk appetite.
- Robust knowledge of relevant security and resilience frameworks and regulations (e.g., NIST CSF, NIS/NIS2, sector-specific resilience expectations), and practical experience translating these into implementable capabilities and controls.
- Strong stakeholder management experience across C-suite, technology, operations, legal, risk, and communications—ensuring coherent decision-making before, during, and after incidents.
Ideally, You'll Also Have:
- Security-related qualifications such as CISSP, CISM, CISMP, CIISEC.
- Experience operating within an NCSC Assured Cyber Consultancy.
- Sector experience in Government & Public Sector, Energy & Utilities, Retail and Consumer Products, Life Sciences, Telecoms, Media and Technology, or Transport.
- Professional services experience with market-leading organisations in delivering cybersecurity solutions.
About EY and Opportunities
At EY, we are committed to building a better working world. Our Cybersecurity Consulting Practice is expanding, and we are investing in capabilities to meet demand for cybersecurity solutions. Join us and be part of a global team delivering cutting-edge security transformation programs and services.
The Opportunity: As a Director in Cybersecurity - Cyber Resilience, you will bring diverse perspectives and deep subject-matter expertise to deliver high-quality insights and outcomes for our clients. You will lead complex resilience engagements, strengthen senior client relationships, and guide teams to develop practical solutions that enhance resilience in their businesses.
Join Us: EY offers a meaningful and fulfilling career within an inclusive culture and cutting-edge technology. We strive to build a better working world for all.
We value integrity and collaboration across diverse backgrounds and a growth mindset. What we offer includes a competitive remuneration package and a comprehensive Total Rewards program with flexible working options, holidays, health and well-being, insurance, savings, and a range of discounts and promotions.
We also offer:
- Continuous learning: Develop the mindset and skills to navigate whatever comes next.
- Success as defined by you: Tools and flexibility to make a meaningful impact, your way.
- Transformative leadership: Insights, coaching, and confidence to lead effectively.
- Diverse and inclusive culture: Be valued for who you are and empowered to contribute.
Director - Cybersecurity - Cyber Resilience, TC, UKI in Westminster employer: Ernst & Young
Contact Detail:
Ernst & Young Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Director - Cybersecurity - Cyber Resilience, TC, UKI in Westminster
✨Tip Number 1
Network like a pro! Get out there and connect with people in the cybersecurity field. Attend industry events, webinars, or even local meetups. The more you engage with others, the better your chances of hearing about job openings before they’re even advertised.
✨Tip Number 2
Show off your skills! Create a portfolio that highlights your experience in cyber resilience and crisis management. Include case studies, simulations you've facilitated, and any tangible outcomes you've achieved. This will give potential employers a clear picture of what you can bring to the table.
✨Tip Number 3
Don’t just apply—follow up! After submitting your application through our website, reach out to someone in the company. A quick email expressing your enthusiasm for the role can set you apart from other candidates and show that you’re genuinely interested.
✨Tip Number 4
Prepare for interviews by simulating crisis scenarios. Think about how you would handle high-pressure situations and be ready to discuss your thought process. This will not only showcase your expertise but also demonstrate your ability to think on your feet.
We think you need these skills to ace Director - Cybersecurity - Cyber Resilience, TC, UKI in Westminster
Some tips for your application 🫡
Tailor Your Application: Make sure to customise your CV and cover letter to highlight your experience in cyber resilience and crisis management. Use keywords from the job description to show that you understand what we're looking for.
Showcase Your Achievements: Don’t just list your responsibilities; focus on what you've achieved in previous roles. Quantify your successes where possible, like improvements in response times or successful simulations you've led.
Be Authentic: Let your personality shine through in your application. We want to see who you are beyond your qualifications. Share your passion for cybersecurity and how it drives you to make a difference.
Apply Through Our Website: For the best chance of getting noticed, apply directly through our website. It’s the easiest way for us to track your application and ensure it reaches the right people.
How to prepare for a job interview at Ernst & Young
✨Know Your Cyber Resilience Stuff
Make sure you brush up on the latest trends in cyber resilience and crisis management. Understand the current threat landscape and be ready to discuss how you would translate that into practical improvements for a business.
✨Showcase Your Facilitation Skills
Prepare to demonstrate your ability to lead high-pressure decision-making scenarios. Think of examples where you've successfully guided senior leaders through crises, and be ready to share how you injected realistic developments and drove clear actions.
✨Connect Cyber to Business Impact
Be prepared to discuss how you can link cyber threats to business impact. Have examples ready that show how you've identified critical dependencies and control gaps, and how you've integrated cyber response into wider enterprise resilience plans.
✨Build Relationships with Stakeholders
Highlight your experience in managing relationships across C-suite and functional leaders. Be ready to talk about how you've improved cross-functional coordination during incidents and how you can strengthen organisational readiness.
