Cyber Strategy Lead — Drive Security Transformation

EY; Boston (MA); Hybrid; USD 145,000 - 266,000; Full time

Benefits offered by this job

Hybrid work model

Total Rewards package

Generous vacation policy

Job summary

EY is seeking a Manager in Cyber Strategy to lead engagements, shape cybersecurity programs, and align security investments with business objectives. You will guide governance, risk, and operating model transformations while delivering executive recommendations.

Collaboration across EY teams and strong leadership are essential. You will manage engagement workstreams, supervise teams, and monitor evolving threats and regulatory developments to provide actionable client insights.

Qualifications

• Bachelor's degree or graduate degree with relevant experience in cybersecurity strategy and advisory.
• Experience in cybersecurity assessments, governance, risk management, and program transformation.
• Familiarity with industry frameworks (NIST CSF, NIST 800-53, ISO 27001/27002, CIS Controls, PCI DSS).
• Willingness to travel 25–50% per client needs.

Responsibilities

• Lead cybersecurity strategy, governance, and transformation engagements across industries.
• Assess programs, operating models, governance, policies, and controls to identify gaps.
• Develop target operating models, roadmaps, and executive-level recommendations.

Skills

Cybersecurity strategy

Governance

Risk management

Leadership

Client engagement

Communication skills

Analytical thinking

Problem solving

Education

Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, Business, Risk Management, or related field

Job description

EY is seeking a Manager in Cyber Strategy to lead engagements, shape cybersecurity programs, and align security investments with business objectives. You will guide governance, risk, and operating model transformations while delivering executive recommendations.

Collaboration across EY teams and strong leadership are essential. You will manage engagement workstreams, supervise teams, and monitor evolving threats and regulatory developments to provide actionable client insights.