Cyber Strategy Lead — Drive Security Transformation

EY; Portland (OR); Hybrid; USD 145,000 - 266,000; Full time

Benefits offered by this job

Medical & dental coverage

401(k) plan

Hybrid work model

Flexible vacation policy

Job summary

EY is seeking a Manager in Cyber Strategy to lead and shape cybersecurity programs and governance for diverse clients across industries. You will connect security investments to business objectives and guide enterprise resilience initiatives.

The role involves developing strategies, operating models, roadmaps, and executive-level recommendations, while leading workstreams, managing budgets, and collaborating with EY professionals to deliver integrated solutions. Occasional travel is required.

Qualifications

• Bachelor's degree and ~5+ years of relevant experience (or graduate degree with ~4+ years).
• Experience in cybersecurity assessments, governance, risk management, and strategy/roadmap development.
• Knowledge of cybersecurity frameworks (NIST CSF, NIST 800-53, ISO 27001/27002, CIS Controls, PCI DSS) and related regulations.

Responsibilities

• Lead and support cybersecurity strategy, governance, and transformation engagements across industries.
• Assess programs, operating models, governance structures, policies, and controls to identify risks and gaps.
• Develop strategies, target operating models, roadmaps, and exec-level recommendations aligned with business objectives.
• Manage engagement workstreams, mentor teams, and ensure high-quality client service within timelines and budgets.

Skills

Cybersecurity strategy

Governance & risk management

Security program assessment

Executive-level communication

Engagement leadership

Threat & regulatory awareness

Strategic planning

Education

Bachelor's degree in Cybersecurity/IS/CS/Engineering/Business

Job description

EY is seeking a Manager in Cyber Strategy to lead and shape cybersecurity programs and governance for diverse clients across industries. You will connect security investments to business objectives and guide enterprise resilience initiatives.

The role involves developing strategies, operating models, roadmaps, and executive-level recommendations, while leading workstreams, managing budgets, and collaborating with EY professionals to deliver integrated solutions. Occasional travel is required.