AI-Driven Vulnerability Management Leader

Ernst & Young Oman; Carson City (NV); On-site; USD 145,000 - 290,000; Full time

Job summary

EY is looking for a Manager in AI-Enabled Vulnerability Management to lead programs and shape how AI is applied across the vulnerability lifecycle. You will own risk-based prioritization, AI workflows, governance, and end-to-end delivery for enterprise clients.

Join a team that develops reusable accelerators, dashboards, and reference architectures while mentoring others and engaging with senior stakeholders across client organizations.

Qualifications

• 6+ years of relevant experience in vulnerability or exposure management, with some in professional services or similar.
• Demonstrated leadership experience managing and mentoring teams and owning delivery quality across concurrent workstreams.
• Hands-on experience leading enterprise VM programs across the full lifecycle, using platforms such as Tenable, Qualys, Rapid7, Wiz, Microsoft Defender, or equivalent.
• Production experience applying AI or machine learning to vulnerability management at scale, including guiding teams in doing the same.
• Experience contributing to business development and offering development — proposals, pursuits, or building new service offerings.

Responsibilities

• Lead the design and delivery of AI-enabled vulnerability and exposure management programs across enterprise environments.
• Own the asset and exposure data foundation and define risk-based prioritization approaches using threat intelligence, exploit prediction, reachability, attack path context, and business criticality.
• Direct the build of AI and agentic workflows that extend beyond ticket creation into orchestrated patching, IaC, and validated remediation.
• Advise clients on vulnerability management controls aligned to regulatory, audit, and industry frameworks.
• Set the standard for how AI output is evaluated and trusted — benchmarking against human baselines and measuring false-positive reduction and time-to-remediate.
• Own AI governance in client environments, including guardrails, human-in-the-loop thresholds, auditability, and client risk acceptance.
• Manage engagement delivery end to end — scope, budget, staffing, risk, and quality — and advise client IT, cloud, and security leadership.
• Build reusable accelerators, reference architectures, and delivery assets, and help shape the offering’s roadmap and go-to-market.
• Lead client efforts to extend vulnerability management to AI systems, covering model, prompt, integration, and supply chain weaknesses.
• Develop executive dashboards and risk metrics that demonstrate exposure reduction, remediation performance, and business impact.
• Mentor senior and junior practitioners, and represent EY in industry groups, conferences, and events.

Skills

Leadership

AI/ML experience

Vulnerability management

Client engagement

Education

No bachelor’s degree required

Tools

Tenable

Qualys

Rapid7

Wiz

Microsoft Defender

Job description

EY is looking for a Manager in AI-Enabled Vulnerability Management to lead programs and shape how AI is applied across the vulnerability lifecycle. You will own risk-based prioritization, AI workflows, governance, and end-to-end delivery for enterprise clients.

Join a team that develops reusable accelerators, dashboards, and reference architectures while mentoring others and engaging with senior stakeholders across client organizations.