AI-Enabled Vulnerability Management Lead

Ernst & Young Oman; Honolulu (HI); On-site; USD 145,000 - 290,000; Full time

Job summary

EY in the United States is seeking a Manager in AI-Enabled Vulnerability Management to lead enterprise programs, set strategy for AI in the vulnerability lifecycle, and deliver risk reduction for clients.

You will own data foundations, build AI-enabled workflows for patching and remediation, mentor teams, and help shape offerings while engaging senior client stakeholders. This role requires 6+ years of VM experience and strong leadership within professional services.

Qualifications

• 6+ years of relevant experience in vulnerability or exposure management, with some in professional services or similar.
• Demonstrated leadership experience managing and mentoring teams and owning delivery quality across concurrent workstreams.
• Hands-on experience leading enterprise VM programs across the full lifecycle, using platforms such as Tenable, Qualys, Rapid7, Wiz, Microsoft Defender, or equivalent.
• Production experience applying AI or machine learning to vulnerability management at scale, including guiding teams in doing the same.
• Experience contributing to business development and offering development - proposals, pursuits, or building new service offerings.

Responsibilities

• Lead the design and delivery of AI-enabled vulnerability and exposure management programs across enterprise environments.
• Own the asset and exposure data foundation and define risk-based prioritization approaches using threat intelligence, exploit prediction, reachability, attack path context, and business criticality.
• Direct the build of AI and agentic workflows that extend beyond ticket creation into orchestrated patching, IaC, and validated remediation.
• Advise clients on vulnerability management controls aligned to regulatory, audit, and industry frameworks.
• Set the standard for how AI output is evaluated and trusted - benchmarking against human baselines and measuring false-positive reduction and time-to-remediate.
• Own AI governance in client environments, including guardrails, human-in-the-loop thresholds, auditability, and client risk acceptance.
• Manage engagement delivery end to end - scope, budget, staffing, risk, and quality - and advise client IT, cloud, and security leadership.
• Build reusable accelerators, reference architectures, and delivery assets, and help shape the offering’s roadmap and go-to-market.
• Lead client efforts to extend vulnerability management to AI systems, covering model, prompt, integration, and supply chain weaknesses.
• Develop executive dashboards and risk metrics that demonstrate exposure reduction, remediation performance, and business impact.
• Mentor senior and junior practitioners, and represent EY in industry groups, conferences, and events.

Skills

Team leadership

Vulnerability management

Threat intelligence

AI governance

Regulatory awareness

Client engagement

Tools

Tenable

Qualys

Rapid7

Wiz

Microsoft Defender

Job description

EY in the United States is seeking a Manager in AI-Enabled Vulnerability Management to lead enterprise programs, set strategy for AI in the vulnerability lifecycle, and deliver risk reduction for clients.

You will own data foundations, build AI-enabled workflows for patching and remediation, mentor teams, and help shape offerings while engaging senior client stakeholders. This role requires 6+ years of VM experience and strong leadership within professional services.