Forensic and Integrity Services - Crisis Manager, Threat Intelligence and Investigation Manager

The opportunity

The Crisis Management, Threat Intelligence & Investigations Manager leads the delivery of end-to-end threat intelligence assessments, spanning strategic, operational, and tactical support. This role oversees the execution of client engagements, including threat data collection, analysis, and delivery of timely, actionable intelligence.

You will support clients in building and maturing threat intelligence programs to reduce exposure to cyber, fraud, geopolitical, insider, and operational risks.

You will also maintain awareness of regulatory and enforcement frameworks to guide clients in using intelligence capabilities to mitigate or avoid potential actions. The role requires regular engagement with the U.S. Intelligence Community, law enforcement, industry groups, and academia to stay current on threat actors and evolving tactics.

Your key responsibilities

• Lead threat intelligence engagements, overseeing collection, analysis, production, and dissemination.
• Manage daily intelligence operations and ensure delivery of high-quality assessments, reports, and briefings.
• Define collection requirements, analytical methodologies, and standard operating procedures.
• Analyze threat actor activity, attack patterns, and geopolitical risks to produce tailored insights.
• Enhance operations through improved tools, automation, and innovative approaches.
• Supervise and mentor analysts and technical specialists, driving team performance and development.
• Ensure quality, risk management, and alignment with client expectations across engagements.
• Drive continuous improvement of intelligence processes, tools, and methodologies.
• Collaborate with cybersecurity, investigations, forensics, and incident response teams to deliver integrated solutions.
• Manage multiple engagements, balancing priorities, deadlines, and resource allocation.
• Translate complex intelligence into clear, business-relevant insights for executive audiences.
• Apply sound judgment in threat assessment and mitigation recommendations.

Skills and attributes for success

To qualify for the role you must have

• Bachelor’s degree in cybersecurity, intelligence studies, international affairs, computer science, information systems, or a related field.
• Advanced degree in political science, international affairs, intelligence studies, or a related discipline.
• 8+ years of experience in intelligence roles, including leading analytic teams in multi-agency environments.
• Experience managing and developing intelligence professionals and leading diverse teams.
• Background in the U.S. Intelligence Community or federal law enforcement, with exposure to intelligence operations, investigations, or threat analysis.
• Strong knowledge of intelligence tradecraft, including structured analytic techniques, requirements development, and the intelligence lifecycle.
• Experience producing strategic, operational, and tactical intelligence products.
• Familiarity with ICD 203 (Analytic Standards) and ICD 206 (Sourcing Requirements).
• Deep understanding of nation-state and non-state threat actors and their tactics.
• Experience in threat actor analysis, intrusion campaigns, malware, OSINT, and intelligence frameworks.
• Knowledge of intelligence platforms and tools, including TIPs and SIEM/SOAR environments.
• Strong written and verbal communication skills, with the ability to convey complex concepts clearly.
• Strong project management skills, including managing multiple priorities and engagements.
• Effective influencing and stakeholder management capabilities.
• Demonstrated analytical rigor, including hypothesis testing and structured analysis.
• Ability to produce clear, well-structured intelligence reports and deliverables.
• Progress toward or attainment of a relevant professional certification such as CFE, PSP or CPP.
• The ability and willingness to travel and work in excess of standard hours when necessary
• Access to reliable transportation to/from the EY office and client sites. A driver's license is strongly recommended as ride share and public transportation options may not be available in all locations

Ideally, you’ll also have

• Experience in a professional services environment

What we look for

We’re interested in passionate and hardworking professionals that have the intellectual curiosity to actively pursue a career in the rapidly changing world of investigations and crisis management. We’re not just looking for strong technical skills – we’re interested in people that have the ability to nurture relationships, both internal and external, and are committed to intimately understanding our clients’ needs. If you’re looking to become part of a community of advisors where you’ll make a measurable difference, this role is for you.