Cybersecurity - TVM - Vulnerability Management - Manager - Consulting - Location OPEN 1

Ernst and Young; San Jose (CA); Hybrid; USD 90,000 - 150,000; Full time

Job summary

An established industry player is seeking an information security specialist to lead the implementation of security solutions for clients. This role involves working with an international team to address complex security challenges, utilizing advanced tools against cyber threats. The position offers ongoing training and collaboration with top professionals in a supportive environment, fostering career growth and development. Join a hybrid work model that values your well-being with flexible arrangements and comprehensive benefits, and be part of a mission to build a better working world.

Benefits

Flexible Work Arrangements

Comprehensive Benefits

Competitive Compensation

Diverse and Inclusive Culture

Qualifications

• 6+ years of experience in cybersecurity or related field.
• CISSP or equivalent cybersecurity certification required.

Responsibilities

• Research and share knowledge on security vulnerabilities and trends.
• Assist in delivering vulnerability management services and solutions.

Skills

Client Relationship Management

Project Management

Vulnerability Assessment

Cybersecurity Standards Knowledge

Analytical Skills

Communication Skills

Education

Bachelor’s degree in Computer Science

Master’s degree in related field

Tools

Qualys

Rapid7

Tenable

Job description

Location: Anywhere in Country

At EY, we’re committed to shaping your future with confidence.

Join us to succeed in a globally connected environment with diverse teams and take your career to new heights. Help build a better working world with EY.

As an information security specialist, you will lead the implementation of security solutions for our clients, supporting their efforts to protect their business. You will be part of an international team of experts addressing complex security challenges and enhancing business resilience. You will work with our Advanced Security Centers to utilize the most sophisticated tools against cyber threats.

The opportunity

We offer ongoing training and coaching to develop your skills. As a leading provider in cybersecurity, you will collaborate with top professionals in a supportive environment. The exceptional EY experience lasts a lifetime.

Your key responsibilities

1. Research and share knowledge on the latest security vulnerabilities, attend and speak at industry conferences, and contribute to thought leadership through publications and blogs.
2. Assist in delivering vulnerability management services, developing tailored solutions, and helping develop EY’s vulnerability management offerings.

Skills and attributes for success

• Build rapport by understanding client concerns and developing supportive relationships; deliver high-quality client service.
• Monitor project progress, manage risks, and keep stakeholders informed.
• Stay updated on industry trends relevant to cybersecurity.
• Evaluate and improve client vulnerability management programs and solutions.
• Perform vulnerability assessments and analyze security controls.
• Familiarity with standards like ISO 27001-2, PCI DSS, NIST, and tools such as Qualys, Rapid7, Tenable, and others.
• Experience with vulnerability management and patching tools, and ability to evaluate and recommend tools.
• Conduct root cause analysis and assess exploitability and impact of vulnerabilities.
• Knowledge of cybersecurity concepts, including risk management, incident response, and enterprise security architecture.
• Assist in managing cybersecurity projects, including planning and reporting.

Minimum qualifications

• Bachelor’s degree in Computer Science, Information Systems, Engineering, Business, or related field, with at least 6 years of experience; or a master's degree with 5 years of experience.
• CISSP or equivalent cybersecurity certification.
• Deep understanding of vulnerability management lifecycle and standards.
• Hands-on experience with vulnerability management tools and operating systems, cloud concepts, and networking fundamentals.
• Strong analytical and communication skills, with the ability to interact with senior management and technical teams.
• Valid driver’s license and passport; willingness to travel.

Preferred qualifications

• Consulting experience, OT environment experience, cloud/container expertise, penetration testing, application security, scripting, and regulatory experience.

What we look for

We seek intellectually curious individuals passionate about cybersecurity, ready to contribute innovative ideas and grow into industry leaders.

What we offer

We provide competitive compensation, benefits, flexible work arrangements, and a diverse, inclusive culture. Our salary ranges are competitive and based on experience and location.

Join our hybrid work model, decide your vacation, and enjoy comprehensive benefits to support your well-being.

Are you ready to shape your future with confidence? Apply today.