Cybersecurity - TVM - Vulnerability Management - Manager - Consulting - Location OPEN 1

Ernst & Young Advisory Services Sdn Bhd; Dallas (TX); Hybrid; USD 143,000 - 264,000; Full time

Job summary

Join a forward-thinking company as an Information Security Specialist, where your expertise will help combat cyber threats and enhance client resilience. In this dynamic role, you'll lead the implementation of security solutions, work with advanced tools, and collaborate with top professionals in a flexible, inclusive environment. Your contributions will not only shape the future of cybersecurity but also foster a better working world. With a competitive salary and opportunities for ongoing training, this is your chance to make a lasting impact in the industry.

Benefits

Flexible vacation policy

Paid holidays

Competitive compensation

Ongoing training and coaching

Qualifications

• 6+ years of experience in cybersecurity or related field.
• CISSP or similar cybersecurity certification required.
• Strong understanding of vulnerability management lifecycle.

Responsibilities

• Lead implementation of security solutions for clients.
• Conduct vulnerability assessments and manage projects.
• Research new security vulnerabilities and trends.

Skills

Vulnerability Management

Cybersecurity

Client Service

Risk Management

Technical Expertise

Communication Skills

Analytical Skills

Project Management

Education

Bachelor's degree in Computer Science

Master's degree in related field

Tools

Qualys

Rapid7

Tenable

CrowdStrike

Tanium

Defender

Job description

Press Tab to Move to Skip to Content Link

Other locations: Anywhere in Country

Date: May 8, 2025

Requisition ID: 1605931

Location: Anywhere in Country

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

Cyber threats, social media, massive data storage, privacy requirements and business continuity demand strong information security measures. As an information security specialist, you will lead the implementation of security solutions for our clients and support their efforts to protect their business. You will be part of an international team of specialists helping clients with complex information security needs and contributing to their business resilience. You will work with our Advanced Security Centers to access sophisticated tools to combat cybercrime.

The opportunity

We support your career development with ongoing training and coaching. As a global leader in this space, you will work with top professionals in a collaborative environment. Whether you join us for a short or long term, the EY experience lasts a lifetime.

Your key responsibilities

• Our security professionals bring diverse industry knowledge, technical expertise, and specialized skills. The team stays relevant by researching new security vulnerabilities, attending and speaking at top security conferences, and sharing knowledge through various channels such as conferences, white papers, and blogs.
• Our Vulnerability Management team aims to provide comprehensive vulnerability management solutions tailored to client needs. As a Manager Consultant, you will assist in delivering these services and help develop EY’s vulnerability management offerings.

Skills and attributes for success

• Developing rapport by understanding others’ concerns and needs, and building supportive relationships. Consistently delivering quality client service.
• Monitoring progress, managing risk, and keeping stakeholders informed.
• Staying updated on industry trends relevant to cybersecurity.
• Evaluating client vulnerability management programs across people, processes, and technology.
• Owning portions of vulnerability management solutions tailored to client environments.
• Performing vulnerability assessments to identify control weaknesses and evaluate existing controls.
• Familiarity with standards like ISO 27001-2, PCI DSS, NIST, ITIL, COBIT, CVSSv4, EPSS, KEV, MITRE ATT&CK.
• Operational experience with tools like Qualys, Rapid7, Tenable, CrowdStrike, Tanium, Defender, including deployment and configuration.
• Experience with vulnerability management platforms such as SNOW VR, Kenna, NopSec, Nucleus, Vulcan.
• Knowledge of patch management tools like Tanium, BigFix, Ivanti, ManageEngine.
• Ability to evaluate and select vulnerability management vendors.
• Conducting root cause analysis and determining technical solutions for vulnerabilities.
• Assessing exploitability and risk impact tailored to organizational context.
• Understanding cybersecurity concepts including vulnerability management, privacy, incident response, governance, risk, compliance, and architecture.
• Managing cybersecurity projects, including developing project charters, plans, and status updates.

To qualify for the role, you must have

• Bachelor’s degree in Computer Science, Information Systems, Engineering, Business, or related field, with at least 6 years of related experience; or a Master’s degree with 5 years of experience.
• CISSP or similar cybersecurity certification.
• Strong understanding of vulnerability management lifecycle and governance.
• Familiarity with standards like ISO 27001-2, PCI DSS, NIST, ITIL, COBIT, CVSSv4, EPSS, KEV, MITRE ATT&CK.
• Operational experience with vulnerability management tools such as Qualys, Tenable, Rapid7, including deployment and operation.
• Understanding of operating systems (Windows, Unix, MacOS), cloud concepts, and networking fundamentals.
• Proficiency in writing and executing queries for metrics and dashboards.
• Knowledge of scanning tool APIs for integration.
• Ability to communicate vulnerabilities clearly to technical and leadership audiences.
• Understanding of cybersecurity concepts like secure configuration, data protection, security monitoring, incident response, and enterprise security strategies.
• Project management skills for cybersecurity initiatives.
• Strong communication skills for interacting with stakeholders at all levels.
• Ability to analyze issues strategically and analytically.
• Valid driver’s license and passport; willingness to travel domestically and internationally.

Ideally, you’ll also have

• Prior consulting experience.
• Experience in operational technology environments.
• Experience with Cloud and Container environments.
• Penetration testing experience.
• Application security expertise.
• Scripting skills (e.g., Python).

What we look for

We seek intellectually curious individuals passionate about cybersecurity. Your expertise will help us innovate and make a lasting industry impact. If you are confident in your presentation and technical skills and aspire to become a leading expert, this role is for you.

What we offer you
At EY, we develop future skills and provide world-class experiences. We foster a flexible, inclusive environment that values diversity and global connectivity. Learn more about our offerings.

• Competitive compensation and benefits, with salaries ranging from $143,500 to $263,200, and higher in certain regions.
• Hybrid work model with most roles working in person 40-60% of the time.
• Flexible vacation policy and paid holidays to support well-being.

Are you ready to shape your future with confidence? Apply today. EY accepts applications on an ongoing basis.

For California residents, additional information is available here.

EY values high ethical standards and integrity among employees.

EY | Building a better working world

We create value for clients, society, and the environment, building trust in capital markets. Using data, AI, and technology, EY helps clients address pressing issues and shape the future confidently.

Our services span assurance, consulting, tax, strategy, and transactions, across more than 150 countries with a diverse ecosystem of partners.

We are committed to equal employment opportunities and providing reasonable accommodations for individuals with disabilities or veterans.