Threat Exposure Management - Cyber Security - Technology Consulting

EY; Sydney; On-site; AUD 140,000 - 200,000; Full time

Benefits offered by this job

Flexible work arrangements

Career development

Generous parental leave

Job summary

EY’s Threat Exposure Management team in Sydney is seeking a senior cyber security professional to design, implement and mature enterprise vulnerability management programs for major organisations. You’ll assess current-state capabilities, provide strategic uplift recommendations and drive risk-based security outcomes across complex engagements.

You will collaborate with client stakeholders and delivery teams across projects, lead engagements, and mentor junior staff while supporting business

Qualifications

• Proven experience designing and operating complex vulnerability management programs.
• Experience in assessing current-state maturity and uplift initiatives.
• Experience with vulnerability management platforms such as Qualys, Nessus, SNOW VR, Nucleus or similar.

Responsibilities

• Lead the design, implementation and ongoing improvement of enterprise vulnerability management programs.
• Assess current-state cyber security capabilities and provide recommendations to improve maturity and governance.
• Design and operate vulnerability management programs that reduce organisational risk.
• Provide leadership across client engagements and oversee delivery teams.
• Act as a trusted advisor to senior client stakeholders.
• Coach, mentor and develop team members within the practice.
• Support business development, proposals and practice growth.
• Identify opportunities to leverage automation and emerging technologies to enhance cyber security services.

Skills

Vulnerability management

Consulting & advisory

Executive communication

Stakeholder management

Mentoring a team

Engagement leadership

Automation awareness

Tools

Qualys

Nessus

SNOW VR

Nucleus

Job description

Threat Exposure Management - Cyber Security - Technology Consulting

Location: Sydney

Other locations: Primary Location Only

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

The opportunity

Within EY’s Cyber Security practice, you will help design, transform and deliver cyber security services for major organisations. You will help clients assess the maturity of their current vulnerability and threat exposure management capabilities, provide strategic recommendations, and design scalable, risk-based programs that improve security outcomes.

You will work closely with client stakeholders and delivery teams across complex cyber security engagements.

Location: Melbourne or Sydney preferred, however candidates from other Australian locations will also be considered.

Your key responsibilities

• Lead the design, implementation and ongoing improvement of enterprise vulnerability management programs.
• Assess current-state cyber security capabilities and provide recommendations to improve maturity, governance and operational effectiveness.
• Design and operate complex vulnerability management programs that successfully reduce organisational risk.
• Design and optimise vulnerability management operating models, processes and service architectures.
• Provide leadership and oversight across client engagements, ensuring successful delivery outcomes.
• Act as a trusted advisor to senior client stakeholders.
• Coach, mentor and develop team members while serving as a counsellor within the practice.
• Support business development activities, proposals and practice growth initiatives.
• Identify opportunities to leverage automation and emerging technologies to enhance cyber security services.

Skills and attributes for success

• Proven experience designing and operating complex vulnerability management programs that have successfully reduced organisational risk.
• Strong consulting and advisory experience, including assessing current-state maturity and recommending uplift initiatives.
• Experience with vulnerability management and scanning platforms such as Qualys, Nessus, ServiceNow Vulnerability Response (SNOW VR), Nucleus or similar technologies.
• Demonstrated ability to lead client engagements and provide technical oversight across multidisciplinary teams.
• Strong stakeholder management and executive communication skills.
• Experience leading, mentoring and developing cyber security professionals.
• Ability to lead the design, implementation and strategic direction of client engagements while overseeing delivery teams.
• Ability to obtain or hold an NV1 Security Clearance.

Ideally, you’ll also have the skills and attributes below but don’t worry if you don’t tick all the boxes. We’re interested in your aptitude, attitude and willingness to learn.

• Experience within cyber security consulting, managed security services, or managed service provider (MSP/MSSP) environments.
• Experience working in large-scale enterprise environments.
• Relevant cyber security certifications.

What we offer you

At EY, we’ll fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. We’re proud to be recognised as the #1 WORK180 Endorsed Employer in the Top 101 Employers for Women 2026. Learn more .

• Career development: At EY, your career is yours to shape!We’ll develop you with future-focused skills and equip you with world-class experiences ey.com/au/careerdevelopment
• Flexible work arrangements: Our flexible work policies empower you to balance your professional and personal life, fostering a culture of trust and autonomy.
• A comprehensive benefits package: From a yearly wellness incentive, to access to additional 8 weeks of flex leave per year, and family-friendly policies, including up to 26 weeks of gender-neutral paid parental leave, we cater to your diverse needs to help you thrive both personally and professionally www.ey.com/au/benefits
• Salary: We offer a competitive salary which is open to negotiation pending on skills and experience.

Acknowledgement of Country

EY acknowledges the Traditional Owners and Custodians of the lands on which EY offices are located around Australia. We pay our respects to their cultures, and to their Elders — past, present, and emerging. Find out more about our vision for reconciliation at ey.com/en_au/careers/indigenous

Inclusiveness is core to who we are and how we work together, driving value for our people and for our business. We encourage applications from people of all ages, nationalities, abilities, cultures, sexual orientations, and gender identities and are committed to providing an equitable and barrier free recruitment experience for all. We encourage you to share any support and adjustments you need to be your best and participate equitably in our recruitment process. We understand sharing your needs with us can be daunting, so if you have questions before or during your application, we welcome you to get in touch at [e-mail] or [phone] (option 2). Anything you tell us will be kept completely confidential.

EY |Building a better working world

Our preferred applicant will be required to undertake employment screening by EY or our external third-party provider.