Cybersecurity Enterprise Business Architect

Cybersecurity Enterprise Business Architect

Base pay range: $/yr – $/yr

Within EY Information Security we integrate risk strategy, digital identity, cyber defense, application security, and technology solutions while considering the entire security lifecycle. As a member of the STS team, the Cybersecurity Enterprise Business Architect bridges the gap between high‑level strategy and solution architecture, determining the future architectural direction for security technologies primarily centered around network and infrastructure protection for EY Global.

• Strategic direction: produce and document technology strategy primarily for the Domain Lead’s security technology domain.
• Thought leadership: provide security and business thought leadership at an enterprise level.
• Process mapping and design: lead the mapping and design of business capabilities to current and future‑state business processes, technology solutions, and associated data architectures & models, ensuring alignment with GRC & IRM objectives.
• Analytical assessment: conduct thorough analyses of existing processes to identify inefficiencies, challenges, and opportunities, providing actionable recommendations.
• Stakeholder collaboration: drive engagement with key stakeholders across the organization to facilitate discussions, gather requirements, and ensure business needs are met in business architectures and implementations.
• Risk integration: integrate risk management principles into business processes, ensuring that risk considerations are embedded in decision‑making and operational practices.
• Governance framework development: establish and maintain governance frameworks that define process ownership, accountability, and compliance requirements.
• Change‑management support: design processes that facilitate user adoption and provide input for training and communication strategies.
• Data management oversight: ensure that business processes are supported by accurate and relevant data, collaborating with IT and data management teams to integrate necessary systems.
• Documentation standards: develop and enforce documentation standards, templates, and modeling conventions to ensure consistency and clarity in process representation.
• Performance metrics definition: define and implement key performance indicators (KPIs) and metrics to measure process performance, maturity, and effectiveness, using data to drive continuous improvement.
• Cross‑functional leadership: lead cross‑functional teams to ensure end‑to‑end business capability and process alignment, fostering collaboration and integration across various business units and functions.
• Team Development: lead data and security architects through coaching, mentoring, and course correction.

• Experience initiating new ideas and leading architectural activities.
• Process mapping and design: ability to create detailed process maps and design future‑state processes that align with organizational objectives.
• Analytical thinking: strong analytical skills to identify inefficiencies, challenges, and opportunities for improvement within existing processes.
• Stakeholder engagement: excellent communication and interpersonal skills to collaborate with various stakeholders, including business leaders, analysts, and technology teams.
• Risk management knowledge: understanding of risk management principles and frameworks to effectively integrate risk considerations into business processes.
• Governance framework development: experience in establishing governance frameworks and process ownership to ensure accountability and compliance.
• Change management: skills in change management to support the adoption of new processes and ensure smooth transitions within the organization.
• Data integration and management: knowledge of data architectures, data science, and data integration techniques & systems to ensure that processes are supported by accurate and relevant data.
• Documentation and standards: proficiency in developing documentation standards, templates, and modeling conventions for consistent process representation.
• Performance measurement: ability to define and implement…