Manager - Network & Infrastructure Security

EY; Bengaluru; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

EY is seeking an experienced AI IT/OT Network & Infrastructure Security Manager to serve as a technical owner for client-facing transformations across enterprise platforms, cybersecurity controls, and AI tools.

The role balances hands-on engineering with advisory responsibilities, guiding design-to-deployment efforts while embedding with clients to deliver high-impact security architectures in hybrid environments.

Qualifications

• Proven experience in AI-driven network/security for IT/OT environments.
• Experience implementing Zero Trust and IEC 62443-aligned OT security controls.
• Hands-on with NGFWs (Palo Alto, Cisco, Fortinet) and VMware security.

Responsibilities

• Lead design and implementation of network and infrastructure security strategies across IT, OT, cloud, and industrial environments.
• Drive adoption of Zero Trust, OT security controls, and segmentation architectures.
• Oversee deployment and governance of NGFW, NAC, VPN, ZTNA, SASE, DNS security and cloud security tools.

Skills

AI security strategy

OT security

Zero Trust security

XDR

NGFW

Education

Cybersecurity certifications (CISSP/CISA/CISM)

Tools

Nozomi

Claroty

Armis

Dragos

Cisco Cyber Vision

Job description

Role summary

We are looking for an AI - IT/OT Network & Infrastructure Security Manager to act as the technical owner for client-facing network & Infrastructure Security transformations that sit at the intersection of enterprise platforms, cybersecurity controls, and AI tools. This role is for a hands‑on manager who can move from discovery to design to deployment, embedding closely with clients to architect and implement high‑impact solutions while leading engineering teams and shaping deals. Your internal role matrix positions this level as the next step beyond just delivery, but architecting solutions at the intersection of platforms and AI tools (agents and models).

Role overview

This role is part of the Cyber Frontier & AI capability focused on enabling scalable, AI‑first cyber defense across enterprise and industrial environments.

Key responsibilities

• Lead the design and implementation of network and infrastructure security strategies across enterprise, cloud, and OT environments.
• Drive adoption of Zero Trust, IEC 62443‑aligned OT security controls, and advanced segmentation architectures.
• Oversee deployment and governance of NGFW, NAC, VPN, ZTNA, SASE, DNS security, CASB, and CSPM solutions.
• Lead incident response and security improvement initiatives to enhance cyber resilience across hybrid infrastructure.
• Provide strategic guidance on secure remote access, DMZ architecture, PLC security, and cloud network protection.
• Design and implement AI‑assisted IT/OT security architecture and operations, enabling predictive threat monitoring and automated response within industrial environments.
• Develop and deploy AI‑driven anomaly detection models to identify deviations in OT network traffic, process behaviors, and industrial protocols (e.g., Modbus, DNP3, OPC).
• Build AI‑based rule optimization frameworks for IT/OT security controls, improving traffic filtering, segmentation policies, and alert accuracy.
• Leverage AI for OT network traffic optimization, enabling intelligent routing, congestion minimization, and adaptive policy enforcement.
• Implement AI‑powered device behavior profiling, establishing baselines for PLCs, HMIs, and IoT/IIoT assets to detect unauthorized or abnormal activities.
• Apply AI in PLC code analysis and review, identifying logic anomalies, misconfigurations, and potential security vulnerabilities in industrial control systems.
• Utilize AI/ML for network threat detection, including intrusion detection, lateral movement analysis, and zero‑day attack identification in IT/OT environments.
• Design and optimize prompt engineering strategies to effectively leverage GenAI tools for IT/OT security use cases such as incident investigation, log analysis, and threat intelligence enrichment.
• Enable AI‑driven continuous monitoring and predictive risk analytics to enhance IT/OT resilience and reduce operational downtime.
• Build reusable methods, accelerators, reference architectures, and runbooks that strengthen the firms AI Network & Infrastructure Security offerings and improve repeatability across sectors and accounts.
• Manage client expectations, delivery scope, solution quality, risks, and technical escalations while coaching teams and enabling long‑term client capability through documentation and knowledge transfer.

Required qualifications

• 812 years of experience across AI driven Network & Infrastructure security domain, Security architecture, OT security, Zero Trust Security, or related fields.
• Experience with OT security tools (Nozomi, Claroty, Armis, Dragos, Cisco Cyber Vision) and OT vulnerability management.
• Expertise in XDR, Zero Trust, and regulatory frameworks (IEC 62443, CIS). Hands‑on with NGFWs (Palo Alto, Cisco, Fortinet, Azure Firewall) and VMware virtualization security.
• Skilled in SSE/SASE platforms (Netskope, Zscaler, Akamai) and secure access technologies (VPN, ZTNA, DNS security).
• Strong capability in multi‑vendor security integration across IT, OT, and cloud environments.
• Strong client‑facing communication and the ability to operate as a trusted technical advisor to senior stakeholders.

Ideally, youll also have

• Good soft skills i.e. verbal & written communication, technical document writing etc
• Strong project management, negotiation and interpersonal skills
• Prior experience working in Advisory or Technology Consulting industry
• Customer orientation skills
• Industry related certification (e.g. CISSP, CISA, CISM, SABSA, PRINCE2, TOGAF)
• Vendor related certifications (e.g. Zscaler, Nozomi, Netskope, Palo Alto Networks, Cisco & others)