Cyber - AI-Enabled Vulnerability Management - Manager - Consulting

EY; Portland (OR); On-site; USD 145,000 - 302,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off

Job summary

EY is seeking a Manager in AI-Enabled Vulnerability Management to lead and deliver client programs across enterprise environments. You will define how AI is applied across the vulnerability lifecycle and be accountable for risk reduction and reusable capability development.

You will mentor teams, shape offerings, and drive governance for AI-enabled VM while collaborating with senior client stakeholders.

Qualifications

• 6+ years of vulnerability or exposure management experience.
• Leadership experience across multiple delivery workstreams.
• Hands-on VM program leadership across full lifecycle.

Responsibilities

• Lead AI-enabled vulnerability and exposure management programs.
• Own asset and exposure data foundation and define risk-based prioritization.
• Build AI workflows for orchestrated patching and remediation.
• Advise on controls aligned to regulatory frameworks.
• Set standards for AI output validation and risk reduction metrics.
• Own AI governance including guardrails and auditability.
• Manage end-to-end engagement scope, budget, staffing and quality.
• Develop reusable accelerators and delivery assets.
• Lead client efforts to extend VM to AI systems and supply chain.
• Develop executive dashboards and communicate business impact.
• Mentor practitioners and represent EY externally.

Skills

Vulnerability management

Leadership

AI in security

Client engagement

Delivery management

Regulatory awareness

Tools

Tenable

Qualys

Rapid7

Wiz

Microsoft Defender

Job description

Location: Anywhere in Country

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

The Opportunity

Clients across every industry look to us for trusted solutions to increasingly complex threats. As a Manager in AI-Enabled Vulnerability Management, you’ll lead teams and client programs that move organizations from scan-and-patch cycles to continuous threat exposure management (CTEM). You’ll set the strategy for how AI is applied across the vulnerability lifecycle and be accountable for both the risk reduction clients realize and the reusable capability we build along the way.

Your Key Responsibilities

• Lead the design and delivery of AI-enabled vulnerability and exposure management programs across enterprise environments.
• Own the asset and exposure data foundation and define risk-based prioritization approaches using threat intelligence, exploit prediction, reachability, attack path context, and business criticality.
• Direct the build of AI and agentic workflows that extend beyond ticket creation into orchestrated patching, IaC, and validated remediation.
• Advise clients on vulnerability management controls aligned to regulatory, audit, and industry frameworks.
• Set the standard for how AI output is evaluated and trusted — benchmarking against human baselines and measuring false-positive reduction and time-to-remediate.
• Own AI governance in client environments, including guardrails, human-in-the-loop thresholds, auditability, and client risk acceptance.
• Manage engagement delivery end to end — scope, budget, staffing, risk, and quality — and advise client IT, cloud, and security leadership.
• Build reusable accelerators, reference architectures, and delivery assets, and help shape the offering’s roadmap and go-to-market.
• Lead client efforts to extend vulnerability management to AI systems, covering model, prompt, integration, and supply chain weaknesses.
• Develop executive dashboards and risk metrics that demonstrate exposure reduction, remediation performance, and business impact.
• Mentor senior and junior practitioners, and represent EY in industry groups, conferences, and events.

Skills And Attributes For Success

• Human-forward skills — empathy, curiosity, adaptability, and clear communication.
• Advanced problem-solving and the judgment to decide with incomplete information.
• The ability to set the standard for validating AI output across a team.
• A bias toward building reusable capability over repeatable effort.
• Digital and learning agility in adopting new AI tooling, and in helping teams do the same.
• A platform-agnostic mindset, evaluating tooling based on client need rather than a single vendor stack.
• The ability to lead, develop, and retain high-performing teams while remaining accountable for quality.
• The ability to engage senior client stakeholders and elevate risks and opportunities appropriately.

To qualify for the role, you must have:

• 6+ years of relevant experience in vulnerability or exposure management, with some in professional services or similar. No bachelor’s degree is required.
• Demonstrated leadership experience managing and mentoring teams and owning delivery quality across concurrent workstreams.
• Hands‑on experience leading enterprise VM programs across the full lifecycle, using platforms such as Tenable, Qualys, Rapid7, Wiz, Microsoft Defender, or equivalent.
• Production experience applying AI or machine learning to vulnerability management at scale, including guiding teams in doing the same.
• Experience contributing to business development and offering development — proposals, pursuits, or building new service offerings.

Ideally, you’ll also have

• Experience defining evaluation or benchmarking approaches for AI‑assisted security workflows.
• Experience with automated remediation — patch orchestration, IaC fixes, or pull‑request‑generated fixes with rollback.
• Experience establishing governance for AI used in client environments.
• A relevant certification in AI security, vulnerability management, or cybersecurity, or the ability to acquire one after employment.
• Experience assessing or securing AI and machine learning systems.
• Strong written and verbal communication with clients, senior leaders, and technical teams.
• Experience defining VM metrics, KPIs, and executive dashboards that demonstrate risk reduction.
• Proficiency with consulting methods including scoping, estimating, staffing, and engagement economics.

What We Look For

We seek top performers with deep understanding of the vulnerability landscape and the capacity to lead teams in a dynamic, client-driven environment — people who manage today’s exposure while anticipating tomorrow’s.

What We Offer You

At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers.

• The salary range for this job is:
• New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $173,900 to $290,100
• Bay Area California offices – $181,200 to $302,100
• All other offices locations in the US, including Sacramento – $144,900 to $265,800
• Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.

EY | Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi‑disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

All in to shape the future with confidence.

EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.

EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY’s Talent Shared Services Team (TSS) or email the TSS at [e-mail].