Cyber - Enterprise Security Architect - Manager - Consulting

EY is a globally connected professional services organization providing assurance, consulting, tax, strategy, and transactions services. The Manager will lead enterprise security architecture consulting engagements, including architecture assessments, Zero Trust design, cloud security architecture, and security governance. The role also involves managing client workstreams, mentoring consulting teams, advising executive stakeholders, and contributing to business development.

Responsibilities:

• As a Manager on the Enterprise Security Architecture team, you will lead and manage security architecture engagements across a range of industries. You will oversee security architecture assessments, direct future-state architecture design initiatives, and guide clients through the development of architecture standards, governance frameworks, and security patterns that embed security into technology and business change programs. You will work closely with client leadership—including CISOs, enterprise architects, and technology executives—to evaluate security posture across network, cloud, application, data, and identity domains, facilitate architecture review sessions, and translate technical findings into prioritized, executive-ready recommendations. You will provide hands-on direction across Zero Trust architecture programs, cloud security design, and DevSecOps integration initiatives, ensuring that security architecture decisions are grounded in both technical rigor and business context
• As a Manager, you will be responsible for managing engagement workstreams, leading and mentoring teams of Senior Consultants and Consultants, and delivering high-quality client service within established timelines and budgets. You will monitor developments across the security architecture landscape—including emerging threats, evolving cloud security capabilities, and regulatory requirements—and translate insights into actionable guidance for clients and EY's practice. In addition, you will contribute to business development activities, including proposal development, client presentations, thought leadership and account growth initiatives, and collaborate with professionals across EY's Cyber and broader technology capabilities to deliver integrated, cross-disciplinary client solutions

Requirements:

• • Deep knowledge of enterprise security architecture principles, patterns, and frameworks, with the ability to lead design initiatives across network, cloud, application, data, identity, and endpoint security domains
• • Ability to work closely with Senior Managers, Partners, and client executives to define engagement scope, manage expectations, and deliver successful architecture outcomes
• • Experience advising organizations on security architecture strategy, Zero Trust program design, cloud security architecture, and security governance
• • Hands-on familiarity with security architecture tooling—including architecture modeling platforms, threat modeling tools, and cloud-native security services—with the ability to guide technical teams in their application
• • Ability to deliver high-quality work products within budget and established deadlines
• • Strong analytical, problem-solving, and critical-thinking skills applied to complex security architecture challenges
• • Ability to communicate technical architecture concepts clearly to both engineering teams and executive audiences
• • Strong presentation, facilitation, and stakeholder management skills, including experience leading architecture review board sessions and executive workshops
• • Experience leading and developing teams in a collaborative, fast-paced consulting environment
• • Commitment to quality, continuous learning, and staying current with an evolving technology and threat landscape
• • A bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, and approximately 5+ years of relevant experience; or a graduate degree and approximately 4+ years of relevant experience
• • Experience in one or more of the following areas:
  • Enterprise security architecture assessments and future-state architecture design
  • Network security architecture, including segmentation, secure access, and perimeter design
  • Cloud security architecture across AWS, Azure, or GCP, including IaaS, PaaS, and SaaS security
  • Identity and access management architecture, including Zero Trust and privileged access design
  • Application security architecture, secure SDLC, and DevSecOps integration
  • Data protection architecture, including encryption, data classification, and data loss prevention
  • Security architecture governance, standards development, and architecture review processes
• • Knowledge of cybersecurity frameworks and standards, including NIST CSF, NIST 800-53, ISO 27001/27002, CIS Controls, and SABSA
• • Experience supporting or leading client-facing security architecture engagements, including architecture assessments, design workshops, and executive reporting
• • Strong written, verbal, and presentation skills
• • Willingness to travel based on client and business needs; travel estimated at 25–50%
• • Professional certifications such as CISSP, CCSP, SABSA Chartered Architect (SCF/SCM), TOGAF, or other relevant security architecture credentials
• • Hands-on experience with security architecture tooling, including architecture modeling platforms, threat modeling tools, and cloud-native security services
• • Experience designing and implementing Zero Trust architectures, including microsegmentation, identity-centric access, and continuous verification models
• • Knowledge of security technology domains—including SIEM, SOAR, EDR/XDR, PAM, IAM, CNAPP, and CASB—with the ability to assess and guide architectural fit within complex enterprise environments
• • Exposure to regulatory and compliance requirements—such as HIPAA, PCI DSS, FISMA, GDPR, or NYDFS—and their implications for security architecture strategy and design
• • Experience facilitating executive workshops, client steering committees, and architecture review board engagements
• • Background in software development, infrastructure engineering, or network engineering that informs deep technical architecture credibility
• • Consulting experience within a professional services environment, with a track record of managing client relationships and leading engagement delivery
• • Knowledge of regulated industries such as financial services, healthcare, life sciences, government, or critical infrastructure