Cyber Strategy Lead: Transform Risk & Governance

EY; Montgomery (AL); Hybrid; USD 145,000 - 266,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

401(k) and pension

Job summary

EY is seeking a Manager in Cyber Strategy to help clients strengthen cybersecurity programs and align security investments with business objectives. You will lead engagements across governance, risk, strategy, and operating model transformation.

You will manage workstreams, mentor teams, and translate insights into actionable recommendations for executives, while staying abreast of evolving threats and regulations. Expect a hybrid client-facing role with travel.

Qualifications

• Bachelor's degree and 5+ years of relevant experience, or a graduate degree with 4+ years.
• Experience in cybersecurity assessments, governance, risk, and strategy.
• Familiarity with NIST CSF, NIST 800-53, ISO 27001/27002, CIS Controls, PCI DSS.
• Willingness to travel 25-50%.

Responsibilities

• Lead and support cybersecurity strategy, governance, and transformation engagements.
• Assess programs, operating models, governance structures, and controls to identify gaps.
• Develop strategies, target operating models, roadmaps, and executive recommendations.
• Manage engagement workstreams, lead teams, and ensure timely client service.
• Monitor threats, industry trends, and regulatory developments; contribute to business development.

Skills

Cybersecurity strategy

Governance

Risk management

Client leadership

Executive communication

Team leadership

Education

Bachelor's degree in Cybersecurity

Graduate degree

Job description

EY is seeking a Manager in Cyber Strategy to help clients strengthen cybersecurity programs and align security investments with business objectives. You will lead engagements across governance, risk, strategy, and operating model transformation.

You will manage workstreams, mentor teams, and translate insights into actionable recommendations for executives, while staying abreast of evolving threats and regulations. Expect a hybrid client-facing role with travel.