Senior Digital & Cyber Risk Consultant

EY; New York (NY); On-site; USD 88,000 - 183,000; Full time

Job summary

EY is seeking a Cyber Risk professional in the United States to identify, evaluate, and manage cyber risks across client organizations. You will lead fieldwork, collaborate with IT and security teams, and ensure controls align with business goals and regulatory requirements.

The role emphasizes risk assessments, mitigation strategies, and effective communication with senior management. Travel ~50% and passport required, with opportunities to work across multiple regions.

Qualifications

• A bachelor's or master's degree.
• Bachelor's degree in Information Technology, Cybersecurity, Risk Management, or a related field.
• Professional certifications such as CISSP, CISM, CRISC, or similar are highly desirable.
• Minimum of 2 years of experience in cybersecurity, risk management, or a related role.
• Strong understanding of cybersecurity frameworks (e.g., NIST, ISO 27001) and regulatory requirements.
• Proven experience in risk assessment methodologies and tools.
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills, with the ability to convey complex information to non-technical stakeholders.
• Ability to work independently and as part of a team in a fast-paced environment.
• Travel outside assigned office location at least 50% of the time, plus commute within the region.
• Passport required.

Responsibilities

• Lead fieldwork and manage staff during information systems control engagements.
• Analyze business processes dependent on IT and document engagement status.
• Perform IT control and security engagements with Risk Assurance professionals.
• Identify and communicate cyber risks and control weaknesses to clients.

Skills

Engagement planning

Project management

Team leadership

Cyber risk assessment

Cybersecurity knowledge

Communication skills

Analytical thinking

Independent work

Education

Bachelor's or master's degree

IT/Cybersecurity/Risk Mgmt degree

Certifications desired (CISSP/CISM/CRISC)

Tools

Risk assessment tools

IT security frameworks (NIST/ISO27001)

Job description

EY is seeking a Cyber Risk professional in the United States to identify, evaluate, and manage cyber risks across client organizations. You will lead fieldwork, collaborate with IT and security teams, and ensure controls align with business goals and regulatory requirements.

The role emphasizes risk assessments, mitigation strategies, and effective communication with senior management. Travel ~50% and passport required, with opportunities to work across multiple regions.