Cyber - AI Security - Manager - Consulting

Ernst & Young Advisory Services Sdn Bhd; New York (NY); On-site; USD 170,000 - 250,000; Full time

Job summary

EY in New York seeks a Manager in Cyber - AI Security to lead AI security and governance engagements across industries, overseeing AI risk assessments and AI-SPM deployments.

You will work with CISOs, CIOs, and AI program owners to translate complex findings into executive-ready recommendations while guiding security tooling integration and secure AI deployment pipelines. Travel requested 25–50%.

Qualifications

• Bachelor's degree with 5+ years in AI or ML security or a graduate degree with 4+ years
• Experience in AI security assessments, AI-SPM, or AI model risk evaluations
• Familiarity with AI security frameworks (NIST AI RMF, OWASP Top 10 for LLMs, MITRE ATLAS)
• Knowledge of NIST CSF, NIST 800-53, ISO 27001/27002 in AI environments
• Willingness to travel 25–50%

Responsibilities

• Lead AI security and governance engagements across industries
• Oversee AI security assessments and AI-SPM implementations
• Guide governance frameworks, policies and controls for responsible AI deployment
• Collaborate with client leadership and EY teams to deliver actionable guidance and results

Skills

AI/ML security

Engagement leadership

Stakeholder management

DevSecOps

AI governance

Communication skills

Team leadership

Regulatory awareness

Education

Bachelor's degree in Cybersecurity, CS, IS, Engineering

Tools

AI-SPM platforms

DevSecOps tooling (Harness)

Job description

Cyber - AI Security - Manager - Consulting

Location: New York

Other locations: Anywhere in Country

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

The Opportunity

Artificial Intelligence (AI) is rapidly transforming how organizations operate, and with that transformation comes an entirely new frontier of security, governance, and risk management challenges. Organizations are grappling with securing AI pipelines, managing model‑level risks, operationalizing AI governance programs, and navigating an evolving regulatory landscape specific to AI technologies. As a Manager within EY's Cyber practice focused on AI Security, you will lead client engagements that span AI risk assessments, AI Security Posture Management (AI-SPM), AI governance program design, and secure AI architecture. This role offers the opportunity to drive meaningful client outcomes, lead high‑performing teams, and help organizations navigate one of the most complex and consequential frontiers in cybersecurity—while building a differentiated practice at the intersection of AI and security.

Your Key Responsibilities

As a Manager on the AI Security team, you will lead and manage AI security and AI governance engagements across a range of industries. You will oversee AI security assessments, direct AI-SPM implementations, and guide clients through the design of governance frameworks, policies, and controls that enable responsible and secure AI deployment. You will work closely with client leadership—including CISOs, CIOs, and AI program owners—to evaluate AI risk postures, facilitate workshops and architecture reviews, and translate technical findings into prioritized, executive‑ready recommendations. You will provide hands‑on direction in the configuration and integration of AI security tooling, including platforms and harnesses, and embed security within clients' AI development and deployment pipelines.

As a Manager, you will be responsible for managing engagement workstreams, leading and mentoring teams of Senior Consultants and Consultants, and delivering high‑quality client service within established timelines and budgets. You will monitor the rapidly evolving AI threat landscape, regulatory developments—including the EU AI Act and NIST AI RMF—and emerging AI security tooling, translating insights into actionable guidance for clients and EY's practice. In addition, you will contribute to business development activities, including proposal development, client presentations, thought leadership and account growth initiatives, and collaborate with professionals across EY's Cybersecurity and AI capabilities to deliver integrated solutions.

Skills and Attributes for Success

• Deep knowledge of AI/ML systems, architectures, and deployment patterns—including LLMs, generative AI, and MLOps pipelines—and the security risks they introduce.
• Ability to work closely with Senior Managers, Partners, and client executives to define engagement scope, manage expectations, and deliver successful outcomes.
• Experience advising organizations on AI security posture, AI governance program design, and responsible AI risk management.
• Hands‑on familiarity with AI-SPM platforms and AI security tooling, including DevSecOps platforms and harnesses, with the ability to guide technical implementation teams.
• Ability to deliver high‑quality work products within budget and established deadlines.
• Strong analytical, problem‑solving, and critical‑thinking skills applied to complex AI security and governance challenges.
• Ability to communicate technical AI security concepts clearly to both engineering teams and executive audiences.
• Strong presentation, facilitation, and stakeholder management skills.
• Experience leading and developing teams in a collaborative, fast‑paced consulting environment.
• Commitment to quality, continuous learning, and staying current with the rapidly evolving AI security landscape.

To Qualify for the Role, You Must Have

• A bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, and approximately 5+ years of relevant experience, including at least 1–2 years in AI or machine learning security; or a graduate degree and approximately 4+ years of relevant experience.
• Experience in one or more of the following areas:
  • AI security assessments, AI-SPM, or AI model risk evaluations
  • AI/ML pipeline security, model security, and MLOps security practices
  • AI governance, responsible AI policy development, and AI risk management frameworks
  • DevSecOps and CI/CD security, including experience with platforms and harnesses
  • Cloud security with experience securing AI workloads on platforms such as AWS, Azure, or GCP
  • AI regulatory compliance and emerging AI‑specific standards and guidance
  • Cybersecurity architecture, risk management, and security controls design
• Familiarity with AI security frameworks and guidance, including NIST AI RMF, OWASP Top 10 for LLMs, and MITRE ATLAS.
• Working knowledge of foundational cybersecurity frameworks—including NIST CSF, NIST 800‑53, and ISO 27001/27002—as applied within AI‑enabled environments.
• Experience supporting or leading client‑facing cybersecurity or AI security engagements.
• Strong written, verbal, and presentation skills.
• Willingness to travel based on client and business needs; travel estimated at 25–50%.

Ideally, You'll Also Have

• Professional certifications in cybersecurity (e.g., CISSP, CCSP, CISM, CRISC) or emerging AI/ML security credentials.
• Hands‑on experience with AI-SPM platforms, MLOps tooling, and AI security automation technologies.
• Experience with CI/CD orchestration and integrated security tooling, including Harness, to design and enforce automated security controls within AI development pipelines.
• Knowledge of adversarial machine learning techniques, model explainability requirements, and AI supply chain risk management.
• Exposure to AI‑related regulatory developments, including the EU AI Act, NIST AI RMF, and sector‑specific AI guidance in financial services, healthcare, or critical infrastructure.
• Experience facilitating executive workshops, client steering committees, and AI security architecture reviews.
• Background in software development, data engineering, or ML engineering that informs deep technical AI security credibility.
• Consulting experience within a professional services environment, with a track record of managing client relationships and engagement delivery.

What We Look For

We seek professionals who combine deep AI security expertise with strong consulting and leadership capabilities. The ideal candidate can build trusted relationships with client executives, direct technically sophisticated teams, and deliver practical, well‑grounded recommendations that help organizations govern and secure AI responsibly. Successful candidates bring the hands‑on technical credibility to engage meaningfully with engineering teams alongside the communication skills and business acumen to advise at the executive level—and the drive to help EY build a market‑leading AI security practice.

What we offer you
At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers .

• The salary range for this job is:
  • New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $173,900 to $290,100
  • Bay Area California offices – $181,200 to $302,100
  • All other offices locations in the US, including Sacramento – $144,900 to $265,800
• Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.

EY | Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi‑disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

All in to shape the future with confidence.

EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.

EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY’s Talent Shared Services Team (TSS) or email the TSS at [e-mail] .

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.