Cyber Strategy Lead: Transform Security & Risk

EY; Irvine (CA); Hybrid; USD 145,000 - 302,000; Full time

Job summary

EY is seeking a Manager in Cyber Strategy to lead engagements that strengthen cybersecurity programs and align security investments with business objectives. You will drive strategy, governance, and transformation, working with senior leaders across industries.

You will manage engagement workstreams, monitor threats and regulatory developments, and contribute to business development. Travel of 25-50% is expected, with a hybrid client-facing model.

Qualifications

• Bachelor’s or graduate degree in a related field and 5+ years of experience; or 4+ years with a graduate degree.
• Experience in cybersecurity assessments, governance, risk management, and strategy.
• Knowledge of cybersecurity frameworks (NIST CSF, NIST 800-53, ISO 27001/27002, CIS Controls, PCI DSS).
• Willingness to travel 25-50%.

Responsibilities

• Lead and support cybersecurity strategy, governance, and transformation engagements across industries.
• Assess programs, operating models, governance, policies, and controls to identify gaps and improvements.
• Develop security strategies, target operating models, and executive recommendations aligned to business objectives.
• Manage engagement workstreams, lead teams, and ensure on-time, high-quality client service.

Skills

Cybersecurity strategy

Governance

Risk management

Executive communication

Team leadership

Workshop facilitation

Business development

Education

Bachelor's degree in Cybersecurity/IS/CS/Engineering/Business

Graduate degree

Job description

EY is seeking a Manager in Cyber Strategy to lead engagements that strengthen cybersecurity programs and align security investments with business objectives. You will drive strategy, governance, and transformation, working with senior leaders across industries.

You will manage engagement workstreams, monitor threats and regulatory developments, and contribute to business development. Travel of 25-50% is expected, with a hybrid client-facing model.