Enterprise Security Architect & Cloud Zero-Trust Leader

EY; Oklahoma City (OK); Remote; USD 145,000 - 302,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off

Job summary

EY is seeking a Manager in Enterprise Security Architecture to lead client engagements across diverse industries. You will steer architecture assessments, future‑state design, and standards development while integrating security patterns into technology and business change programs.

You will mentor teams, manage engagement workstreams, and collaborate with executives to deliver practical, risk‑based security enhancements across networks, cloud, data, and identity domains.

Qualifications

• Bachelors degree in Cybersecurity, CS, IS, Engineering or related field with 5+ years of experience.
• Experience in security architecture assessments and future‑state design.
• Knowledge of NIST CSF, NIST 800-53, ISO 27001/27002, CIS Controls and SABSA.
• Willingness to travel 25–50%.

Responsibilities

• Lead security architecture engagements across multiple industries.
• Oversee security architecture assessments and future‑state design initiatives.
• Guide governance frameworks, standards, and security patterns.
• Mentor Senior Consultants and deliver client service on time and budget.

Skills

Security architecture

Zero Trust

Cloud security

DevSecOps

Architecture governance

Executive communication

Leadership

Threat modeling

Education

Bachelor's in Cybersecurity/CS/IS/Engineering

Tools

Architecture modeling tools

Threat modeling tools

Cloud-native security services

Job description

EY is seeking a Manager in Enterprise Security Architecture to lead client engagements across diverse industries. You will steer architecture assessments, future‑state design, and standards development while integrating security patterns into technology and business change programs.

You will mentor teams, manage engagement workstreams, and collaborate with executives to deliver practical, risk‑based security enhancements across networks, cloud, data, and identity domains.