Cyber - Enterprise Security Architect - Senior Manager - Consulting

EY is a globally connected professional services organization providing assurance, consulting, tax, strategy, and transaction services. The Senior Manager will lead enterprise security architecture consulting engagements, advise executive stakeholders, drive business development and thought leadership, and develop high-performing cybersecurity teams.

Responsibilities:

• As a Senior Manager on the Enterprise Security Architecture team, you will direct and oversee complex security architecture engagements across a range of industries, serving as the primary point of accountability for engagement quality, client satisfaction, and delivery of high-quality work products within budget and established deadlines
• You will lead architecture assessments, Zero Trust transformation programs, cloud security architecture initiatives, and security governance engagements—bringing strategic direction and technical depth to each
• You will engage at the executive level with client stakeholders—including CISOs, CIOs, Chief Architects, and Boards—to frame security architecture challenges, present findings and recommendations, and build the trusted advisor relationships that drive long-term client value
• You will ensure that engagement teams produce technically rigorous, business-aligned deliverables that translate complex architecture decisions into clear, actionable guidance
• As a Senior Manager, you will play a leading role in business development—identifying and pursuing new opportunities, shaping proposals, leading client presentations, and expanding relationships within existing accounts
• You will contribute to the strategic direction and growth of EY's Cyber practice by developing service offerings, producing thought leadership, and representing EY at industry forums and client events
• You will lead, mentor, and develop teams of Managers, Senior Consultants, and Consultants, fostering a culture of technical excellence, continuous learning, and collaborative client service
• You will also collaborate across EY's Cyber and broader technology capabilities to bring integrated, cross-disciplinary solutions to clients facing complex enterprise challenges

Requirements:

• Deep expertise in enterprise security architecture principles, patterns, and frameworks, with the authority to set architectural direction across network, cloud, application, data, identity, and endpoint security domains
• Demonstrated ability to build and sustain trusted, executive-level client relationships and serve as a strategic advisor to CISOs, CIOs, and enterprise technology leadership
• Experience leading and shaping security architecture strategy, Zero Trust program design, cloud security architecture, and enterprise security governance at scale
• Strong business development instincts, with experience identifying opportunities, developing proposals, and contributing to account growth strategies
• Ability to translate complex security architecture concepts into compelling narratives for executive and board-level audiences
• Track record of leading high-performing teams, developing talent, and managing multiple concurrent engagement workstreams
• Strong presentation, facilitation, and executive stakeholder management skills, with experience presenting to C-suite and senior leadership audiences
• Demonstrated contribution to thought leadership, market positioning, and practice-building within a consulting or enterprise environment
• Commitment to quality, innovation, and the continuous development of both people and practice capabilities
• A bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, and approximately 8+ years of relevant experience; or a graduate degree and approximately 7+ years of relevant experience
• Experience in one or more of the following areas:
• Enterprise security architecture strategy, assessment, and future-state design
• Network security architecture, including segmentation, secure access, and perimeter design
• Cloud security architecture across AWS, Azure, or GCP, including IaaS, PaaS, and SaaS security
• Identity and access management architecture, including Zero Trust and privileged access design
• Application security architecture, secure SDLC, and DevSecOps integration
• Data protection architecture, including encryption, data classification, and data loss prevention
• Security architecture governance, standards development, and enterprise architecture review processes
• Knowledge of cybersecurity frameworks and standards, including NIST CSF, NIST 800-53, ISO 27001/27002, CIS Controls, and SABSA
• A track record of leading client-facing security architecture engagements, managing senior client relationships, and driving successful delivery outcomes
• Experience contributing to business development efforts, including proposal development, opportunity pursuit, and account growth
• Strong written, verbal, and executive presentation skills
• Willingness to travel based on client and business needs; travel estimated at 25–50%
• Professional certifications such as CISSP, CCSP, SABSA Chartered Architect (SCF/SCM), TOGAF, or other relevant security architecture credentials
• Experience shaping and growing a security architecture practice, service line, or center of excellence within a consulting or enterprise environment
• Established presence in the security architecture community, including contributions to thought leadership, industry publications, conference presentations, or advisory roles
• Experience designing and overseeing implementation of Zero Trust architectures, including microsegmentation, identity-centric access, and continuous verification at enterprise scale
• Knowledge of security technology domains—including SIEM, SOAR, EDR/XDR, PAM, IAM, CNAPP, and CASB—with the ability to advise on strategic architecture fit and technology roadmap decisions
• Deep familiarity with regulatory and compliance requirements—such as HIPAA, PCI DSS, FISMA, GDPR, or NYDFS—and the ability to advise clients on their implications for enterprise security architecture strategy
• Experience managing senior executive relationships and serving in a trusted advisor capacity across complex, multi-year client engagements
• Background in software development, infrastructure engineering, or network engineering that informs technical credibility and depth in architecture discussions
• Knowledge of regulated industries such as financial services, healthcare, life sciences, government, or critical infrastructure