Cyber Security Consultant - Manager/Senior Manager

EY; Kuala Lumpur; On-site; MYR 180,000 - 320,000; Full time

Job summary

EY is expanding its market-leading cybersecurity services in Malaysia and seeks highly motivated Managers and Senior Managers to lead critical client engagements and drive growth across industries. You will work with Partners and Directors to develop innovative security solutions, manage engagements, and grow EY's Cybersecurity practice.

Responsibilities include leading delivery, overseeing budgets, mentoring teams, and pursuing new business opportunities, with a focus on governance, IAM, data

Qualifications

• Minimum 5 years of relevant cybersecurity, technology risk, or technology consulting experience for Manager.
• Minimum 8–10 years of relevant experience for Senior Manager, including leading large-scale engagements.
• Experience leading project teams and managing client engagements.
• Relevant professional certifications such as CISSP, CISM, CISA, or GICSP or equivalent.
• Experience in cybersecurity domains including governance, IAM, data protection, threat & vulnerability management, security operations.

Responsibilities

• Lead cybersecurity engagements and ensure high-quality outcomes.
• Manage client relationships and act as trusted advisor to business and technology stakeholders.
• Oversee project planning, budgeting, resource management, and engagement profitability.
• Lead and coach high-performing teams while fostering learning and collaboration.
• Identify and pursue business development opportunities, including proposals and client presentations.
• Contribute to EY's Cybersecurity practice growth through capability development and market initiatives.
• For Senior Managers, drive strategic client accounts and multi-workstream engagements.

Skills

Leadership & team management

C-suite stakeholder engagement

Cybersecurity frameworks & standards

Business impact translation

Project / program management

Communication & presentation

Coaching & mentoring

Education

Bachelor's degree in Computer Science / Information Security / Engineering / Information Systems (or related)

Job description

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

The Opportunity

At EY, we are expanding our market-leading cyber security services to meet increasing client demand. We are seeking highly motivated Managers and Senior Managers to join our team, lead critical client engagements, and help drive our growth strategy. This is a chance to make a significant impact by delivering cutting-edge solutions, developing our people, shaping the future of our practice, and contributing to business growth across multiple industries.

Your Key Responsibilities

As a Cybersecurity Manager / Senior Manager, you will lead cybersecurity engagements, manage client relationships, and support the growth of EY's Cybersecurity practice. You will work closely with Partners and Directors to develop innovative security solutions, drive engagement delivery, and help clients address evolving cyber risks.

You will have responsibility for:

• Leading the delivery of cybersecurity engagements and ensuring high-quality outcomes.
• Managing client relationships and serving as a trusted advisor to business and technology stakeholders.
• Overseeing project planning, budgeting, resource management, and engagement profitability.
• Leading and coaching high-performing teams while fostering a culture of learning and collaboration.
• Identifying and pursuing business development opportunities, including proposal development, client presentations, and thought leadership.
• Contributing to the growth of EY's Cybersecurity practice through capability development, innovation, and market initiatives.
• For Senior Managers, driving strategic client accounts, leading complex multi-workstream engagements, and supporting revenue growth targets.

To qualify for the role you must have:

• A bachelor's degree in Computer Science, Information Security, Engineering, Information Systems, or a related field.
• Manager: Minimum 5 years of relevant experience in cybersecurity, technology risk, or technology consulting, with experience leading project teams and managing client engagements.
• Senior Manager: Minimum 8-10 years of relevant experience, including significant experience leading large-scale cybersecurity engagements, managing senior client stakeholders, and driving business development initiatives.
• Demonstrated experience in one or more cybersecurity domains, including:
• Cybersecurity Governance, Risk & Compliance (GRC)
• Identity & Access Management (IAM)
• Data Protection & Privacy
• Threat & Vulnerability Management
• Security Architecture & Transformation
• Security Operations & Incident Response
• Experience managing project delivery, engagement economics, and client relationships.
• Relevant professional certifications such as CISSP, CISM, CISA, GICSP or equivalent.

Skills and attributes for success

• Strong leadership and team management skills.
• Ability to engage effectively with C-suite and senior client stakeholders.
• Strong understanding of cybersecurity frameworks, standards, and industry best practices.
• Strong commercial acumen and ability to translate cybersecurity risks into business impacts.
• Proven ability to manage multiple engagements and competing priorities.
• Excellent communication, presentation, and stakeholder management skills.
• Passion for coaching, mentoring, and developing future cybersecurity leaders.

Ideally, you'll also have

• Experience working within a professional services or consulting environment.
• Experience leading cybersecurity transformation programmes.
• Proven track record in business development, account management, and proposal pursuits.
• Experience managing and developing teams across multiple projects and workstreams.
• Strong understanding of industry regulations and compliance requirements, including ISO 27001, NIST, CIS, GDPR, and PDPA.
• Experience across financial services, telecommunications, public sector, healthcare, or other regulated industries.