Privileged Access Management Manager

Ernst & Young LLP ( EY India ); Bengaluru; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

EY Global Delivery Services (GDS) is seeking a PAM Manager to lead enterprise privileged access management strategy and architecture for global clients. The role demands experience crafting Zero Trust-aligned designs and guiding multi-platform implementations across IT and OT environments.

You will engage senior executives, shape deals, and drive transformation programs, with a focus on risk reduction, governance, and seamless integration into client ecosystems.

Qualifications

• 8-10 years of relevant experience in cybersecurity, PAM or architecture.
• Strong experience defining enterprise PAM strategies, roadmaps and Zero Trust transformation.
• Experience with leading PAM platforms and enterprise integrations.

Responsibilities

• Lead PAM strategy, architecture and transformation across discovery, vaulting, rotation, session controls and governance.
• Architect and guide implementations of PAM platforms such as CyberArk, BeyondTrust or Delinea.
• Define target architectures and onboarding standards for privileged identities in IT, cloud and OT environments.
• Support due diligence and post-deal integration related to IAM and PAM.

Skills

Executive presence

PAM architecture

Zero Trust

Stakeholder engagement

Cloud & OT security

Leadership

Education

B.Tech / B.E in CS IT ECE or related

MBA preferred

Tools

CyberArk

BeyondTrust

Delinea

Job description

The opportunity

EYP-IDD-Manager At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

GDS SaT - TSE IT - Cyber DD - Manager - India

We are looking for an experienced Privileged Access Management (PAM) professional to join our Strategy & Execution team as a Manager. The role requires strong architecture and delivery experience across enterprise PAM, including privileged-account discovery and onboarding, secure vault design and implementation, credential rotation, session management, secrets management, endpoint privilege management, remote privileged access and operational governance across IT and OT environments. The successful candidate will bring an enterprise-wide, platform-agnostic perspective and practical experience with leading PAM technologies.

Your key responsibilities

• Play a key role in our Transaction Strategy and Execution team, supporting global EY teams to shape, sell and deliver cybersecurity, IAM and PAM engagements.
• Lead client discussions, translate business and transaction needs into practical solutions, and provide clear advice to senior executives, deal teams and technology leaders.
• Lead enterprise PAM strategy, architecture and transformation work across privileged-account discovery and onboarding, vaulting, credential rotation, session controls, secrets management, endpoint privilege management, remote access and governance across IT and OT environments.
• Define Zero Trust-aligned target architectures, high-level designs, integration and control patterns, resilient platform topologies, onboarding standards and transition roadmaps for human and non-human privileged identities across hybrid and multicloud environments.
• Architect and guide implementations of leading PAM platforms such as CyberArk, BeyondTrust or Delinea, including vaults, password and session management, just-in-time access, secrets management, integrations, high availability and disaster recovery.
• Assess complex PAM environments, identify material risks and technical debt, and recommend pragmatic remediation across privileged users, service and application accounts, cloud roles, DevOps and machine secrets, vendor access and break-glass processes.
• Lead or support buy-side and sell-side cyber due diligence, evaluating IAM and PAM maturity, privileged-access exposures, platform and operational risks, regulatory considerations, deal dependencies, costs and value-creation opportunities.
• Support post-deal cyber and IAM integration, carve-out and separation, including Day 1 planning, user and privileged-account migration, access continuity, PAM platform transition and target-state architecture.
• Define PAM operating models and governance, including ownership, risk-tiering, onboarding, access approvals, credential rotation, session review, emergency access, exceptions, control monitoring, service management and reporting.
• Provide architecture assurance for PAM and wider IAM programs by reviewing designs, integrations, migration approaches, controls and operational readiness, and helping resolve material risks and exceptions.
• Manage engagement scope, teams, quality, timelines, risks and economics while coaching team members and maintaining a high standard of client service.
• Contribute to proposals, market pursuits, thought leadership, new services and reusable methods that strengthen the Strategy & Execution cybersecurity practice.

Skills and attributes for success

• Executive presence and confidence engaging C-level, board, investment and technology stakeholders.
• Structured problem-solving and hypothesis-led thinking, with an investor mindset and focus on value, risk and execution.
• Ability to lead PAM discovery and design workshops, complex architecture reviews and design authorities, reconcile IT and OT security, operational, control and delivery priorities, and build stakeholder alignment across security, infrastructure, cloud, application, DevOps and operations teams.
• Lead meetings with senior client stakeholders to advise, shape and drive the strategy and planning for pre-deal diligence, integration, carve-out / separation and operational restructuring.
• Contribute to our practice development initiatives, supporting the continued focus on our team as a great place to work.
• Have innovative mindset to think out of the box for development of new services as per client needs.
• Act as a role model and support development of junior team members, coupled with the recruitment and training responsibilities.
• Be flexible to support broader cyber diligence, post-deal integration and separation, and cybersecurity transformation work.
• Willingness to undertake international travel as per business requirement.

To qualify for the role

• 8-10 years of relevant experience with B.Tech. / B.E. in Computer Science, Information Technology, Electronics, Cybersecurity or a related discipline; an MBA or equivalent postgraduate qualification from Tier 1/Tier2 institutes is preferred.
• Relevant security, architecture or PAM certifications are advantageous.
• Strong experience defining enterprise PAM strategies, operating models, architecture standards, roadmaps and Zero Trust-aligned transformation plans across IT, cloud and OT environments.
• Strong architecture and delivery experience with at least one leading PAM platform, preferably CyberArk, BeyondTrust or Delinea, including vaulting, credential and session controls, just-in-time access, secrets management, resilience and key enterprise integrations.
• Proven experience leading PAM implementation, migration or transformation workstreams, from discovery and onboarding through testing, cutover, decommissioning and operational handover.
• Strong knowledge of privileged-access controls for human and non-human accounts, including least privilege, credential rotation, session monitoring, emergency access, segregation of duties and audit logging.
• Ideally, you’ll also have broader experience across CyberArk, BeyondTrust, Delinea, Microsoft Entra Privileged Identity Management, cloud-native secrets stores and DevOps secrets-management technologies, together with exposure to PAM use cases in industrial control and OT environments, is an added advantage.
• Strong communication and presentation skills with proven experience of producing high-quality reports, papers, presentations and thought leadership.
• Program and project management expertise with demonstrable experience managing successful enterprise IAM or cybersecurity transformation programs.
• Practical exposure to relevant security and identity standards and frameworks such as NIST CSF, NIST SP 800-207, ISO 27001, CIS Controls and applicable IAM control requirements.

What we offer

EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across six locations - Argentina, China, India, the Philippines, Poland and the UK – and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. We’ll introduce you to an ever-expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career. Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next. Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way. Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs. Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.