Enterprise Security Architecture Manager – Zero Trust & Cloud

EY; McLean (VA); On-site; USD 145,000 - 302,000; Full time

Job summary

EY is seeking a Manager in Enterprise Security Architecture to lead client engagements across industries, shaping architecture strategy and governance. You will oversee security assessments, future‑state design, and security patterns while guiding executives and teams through complex programs.

You will work with CISOs and enterprise leaders to ensure architecture decisions align with business goals, modernize cloud security, and embed best practices across DevSecOps and governance.

Qualifications

• Bachelor's degree or higher in a related field and 5+ years of security architecture experience; or 4+ years with a graduate degree.
• Experience in enterprise security architecture assessments and future‑state design.
• Knowledge of NIST CSF, NIST 800‑53, ISO 27001/27002, CIS Controls, SABSA.

Responsibilities

• Lead and manage security architecture engagements spanning multiple industries.
• Oversee assessments, future‑state design, standards, governance, and security patterns.
• Translate findings into executive‑ready recommendations for clients and EY leadership.
• Mentor Senior Consultants and Consultants and support business development activities.

Skills

Security architecture leadership

Stakeholder management

Cloud security design

Zero Trust design

Threat modeling

Architecture review facilitation

Education

Bachelor's degree in Cybersecurity / Computer Science / Information Systems / Engineering

Graduate degree in related field

Tools

Architecture modeling platforms

Threat modeling tools

Cloud-native security services

Job description

EY is seeking a Manager in Enterprise Security Architecture to lead client engagements across industries, shaping architecture strategy and governance. You will oversee security assessments, future‑state design, and security patterns while guiding executives and teams through complex programs.

You will work with CISOs and enterprise leaders to ensure architecture decisions align with business goals, modernize cloud security, and embed best practices across DevSecOps and governance.