AI-Enabled Vulnerability Management Lead (Consulting)

EY; San Francisco (CA); On-site; USD 181,000 - 302,000; Full time

Job summary

EY Bay Area is seeking a Manager to lead Cyber - AI-Enabled Vulnerability Management programs across enterprise environments, moving from scan-and-patch to continuous threat exposure management and setting AI strategy for the vulnerability lifecycle.

You will own asset data foundations, define risk-based prioritization using Threat Intelligence, attack-path context, and business criticality, and build AI-driven workflows for remediation and governance.

Qualifications

• 6+ years of experience in vulnerability or exposure management.
• Leadership experience delivering multi-stream client programs.
• Hands-on experience with enterprise VM across full lifecycle.
• Production AI/ML experience applied to vulnerability management at scale.
• Experience contributing to business development and service offerings.

Responsibilities

• Lead AI-enabled vulnerability and exposure management programs across enterprise environments.
• Own asset and exposure data foundation and risk-based prioritization using threat intel and other context.
• Design AI and agentic workflows for orchestrated remediation.
• Advise clients on VM controls aligned to regulatory and industry frameworks.
• Set AI output governance with human-in-the-loop and auditability.
• Manage end-to-end engagement delivery including scope, budget, staffing and risk.
• Build reusable accelerators and reference architectures for the offering.
• Lead efforts to extend VM to AI systems, including model and supply chain considerations.
• Develop executive dashboards and risk metrics showing exposure reduction.
• Mentor senior and junior practitioners and represent EY in industry events.

Skills

Vulnerability management

AI governance

Leadership

Client engagement

Threat intelligence

Risk-based prioritization

Project management

Executive dashboards

Regulatory frameworks

Education

No bachelor’s degree required

Tools

Tenable

Qualys

Rapid7

Wiz

Microsoft Defender

Job description

EY Bay Area is seeking a Manager to lead Cyber - AI-Enabled Vulnerability Management programs across enterprise environments, moving from scan-and-patch to continuous threat exposure management and setting AI strategy for the vulnerability lifecycle.

You will own asset data foundations, define risk-based prioritization using Threat Intelligence, attack-path context, and business criticality, and build AI-driven workflows for remediation and governance.