Senior Digital Risk & Cyber Security Consultant

EY; McLean (VA); On-site; USD 105,000 - 175,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Paid time off

Job summary

EY in the United States is seeking a Cyber Risk professional to identify, evaluate, and manage cyber risks across client organizations. You will collaborate with IT and security teams to align risk posture with business objectives and regulatory requirements.

As a fieldwork leader, you will guide IT controls, conduct risk assessments, develop mitigations, prepare reports for senior management, and promote a culture of cybersecurity across the organization.

Qualifications

• A bachelor's or master's degree
• Bachelor's degree in Information Technology, Cybersecurity, Risk Management, or a related field.
• Professional certifications such as CISSP, CISM, CRISC, or similar are highly desirable.
• Minimum of 2 years of experience in cybersecurity, risk management, or a related role.
• Strong understanding of cybersecurity frameworks (e.g., NIST, ISO 27001) and regulatory requirements.
• Proven experience in risk assessment methodologies and tools.
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills, with the ability to convey complex information to non-technical stakeholders.
• Ability to work independently and as part of a team in a fast-paced environment.
• Travel outside of assigned office location at least 50% of the time, plus commute within the region.
• A valid passport is required.

Responsibilities

• Lead fieldwork and manage engagement progress to maximize effectiveness.
• Conduct comprehensive cyber risk assessments identifying vulnerabilities and impacts.
• Develop and implement risk mitigation strategies and controls.
• Coordinate with IT and security teams to keep policies and procedures current.
• Prepare and present risk reports and dashboards to senior management and the board.
• Ensure compliance with laws, regulations, and industry standards.
• Promote cybersecurity awareness and training across the organization.

Skills

Cybersecurity risk assessment

Regulatory compliance

Information security controls

Threat intelligence

Project management

Communication skills

Travel readiness

Education

Bachelor's or Master's degree

Information Technology / Cybersecurity related degree

CISSP / CISM / CRISC certifications

Tools

NIST / ISO 27001 knowledge

Job description

EY in the United States is seeking a Cyber Risk professional to identify, evaluate, and manage cyber risks across client organizations. You will collaborate with IT and security teams to align risk posture with business objectives and regulatory requirements.

As a fieldwork leader, you will guide IT controls, conduct risk assessments, develop mitigations, prepare reports for senior management, and promote a culture of cybersecurity across the organization.