Cyber Strategy Manager: Lead Security Transformations

EY; Washington (District of Columbia); Hybrid; USD 145,000 - 266,000; Full time

Job summary

EY is seeking a Manager in its Cyber Strategy practice to lead and shape cybersecurity programs and operating models for clients. You will align security investments to business objectives and deliver enterprise resilience across governance, risk, and strategy.

The role involves directing engagements, facilitating executive discussions, and contributing to business development while traveling up to 50% as needed. A strong background in frameworks and standards is required.

Qualifications

• Bachelor's degree or higher in a related field with 5+ years of experience
• Experience in cybersecurity assessments and maturity evaluations
• Knowledge of cybersecurity frameworks (NIST, ISO 27001/27002, CIS Controls)
• Experience leading client-facing engagements and communicating to executives
• Willingness to travel 25–50% of the time

Responsibilities

• Lead and support cybersecurity strategy, governance, and transformation engagements
• Assess programs, operating models, governance structures, policies, and controls
• Develop target operating models, roadmaps, and executive recommendations
• Manage engagement workstreams, mentor teams, and ensure delivery within timelines and budgets

Skills

Cybersecurity strategy

Governance & risk

Security roadmap

Operating model

Policies & controls

Executive reporting

Analytical skills

Communication skills

Team leadership

Travel willingness

Education

Bachelor's degree in Cybersecurity

Job description

EY is seeking a Manager in its Cyber Strategy practice to lead and shape cybersecurity programs and operating models for clients. You will align security investments to business objectives and deliver enterprise resilience across governance, risk, and strategy.

The role involves directing engagements, facilitating executive discussions, and contributing to business development while traveling up to 50% as needed. A strong background in frameworks and standards is required.