Cyber Strategy Manager: Transformation & Risk Leadership

EY; Orlando (FL); Hybrid; USD 145,000 - 266,000; Full time

Benefits offered by this job

Hybrid work model

Total Rewards: medical/dental, pension

Paid time off options

Job summary

EY is seeking a Manager in Cyber Strategy to lead cybersecurity strategy, governance, and transformation engagements. You will align security investments with business goals and drive enterprise resilience across industries.

You will manage workstreams, guide teams, and translate threat insights into executive recommendations while staying within timelines and budgets. Travel up to 25-50% is expected.

Qualifications

• Bachelor's degree in a related field and ~5+ years of experience; or graduate degree and ~4+ years of experience.
• Experience in cybersecurity assessments, governance, strategy, operating model design, and controls.
• Knowledge of frameworks like NIST CSF, NIST 800-53, ISO 27001/27002, CIS Controls, PCI DSS; familiarity with HIPAA, FISMA, GLBA.

Responsibilities

• Lead cybersecurity strategy, governance, and transformation engagements across industries.
• Assess programs, operating models, governance structures, policies, standards, and controls to identify gaps and improvements.
• Develop cybersecurity strategies, target operating models, governance frameworks, and roadmaps aligned with business objectives.
• Manage engagement workstreams, lead teams, and deliver client service within timelines and budgets.
• Monitor threats and regulatory developments; contribute to business development and thought leadership.

Skills

Cyber strategy

Engagement leadership

Stakeholder mgmt

Risk assessment

Governance

Regulatory knowledge

Education

Bachelor's degree

Graduate degree

Job description

EY is seeking a Manager in Cyber Strategy to lead cybersecurity strategy, governance, and transformation engagements. You will align security investments with business goals and drive enterprise resilience across industries.

You will manage workstreams, guide teams, and translate threat insights into executive recommendations while staying within timelines and budgets. Travel up to 25-50% is expected.