Cyber Strategy Manager: Lead Security Transformation

EY; Harrisburg (Dauphin County); Hybrid; USD 145,000 - 302,000; Full time

Benefits offered by this job

Hybrid work model

Flexible vacation policy

Total rewards package

Job summary

EY is seeking a Manager in its Cyber Strategy practice to strengthen cybersecurity programs and align security investments with business objectives. You will lead engagements across industries, shaping governance, risk management, and operating models to deliver tangible outcomes.

You’ll collaborate with senior leaders, guide transformation roadmaps, and oversee teams while staying focused on practical, executive-level recommendations.

Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, Business, Risk Management, or a related field and 5+ years of relevant experience.
• Experience in cybersecurity assessments, governance, and transformation initiatives.
• Familiarity with frameworks such as NIST CSF, NIST 800-53, ISO 27001/27002, CIS Controls, PCI DSS.
• Willingness to travel 25-50%.

Responsibilities

• Lead and support cybersecurity strategy, governance, and transformation engagements across multiple industries.
• Assess cybersecurity programs, operating models, governance structures, policies, standards, and controls to identify gaps.
• Develop cybersecurity strategies, target operating models, governance frameworks, and transformation roadmaps with executive alignment.
• Manage engagement workstreams, lead teams, and ensure delivery within timelines and budgets.
• Support business development activities and client relationship management.

Skills

Cybersecurity strategy

Governance & risk management

Cybersecurity assessments

Stakeholder management

Executive communication

Project leadership

Analytical thinking

Education

Bachelor's degree in Cybersecurity or related field

Graduate degree in a relevant field

Tools

CISSP

CISM

CRISC

CISA

CGEIT

CCSP

Security+

Job description

EY is seeking a Manager in its Cyber Strategy practice to strengthen cybersecurity programs and align security investments with business objectives. You will lead engagements across industries, shaping governance, risk management, and operating models to deliver tangible outcomes.

You’ll collaborate with senior leaders, guide transformation roadmaps, and oversee teams while staying focused on practical, executive-level recommendations.