Cyber Risk Senior Consultant - Digital Security & Advisory

Location:

Atlanta, Boston, Chicago, Cleveland, Dallas, Detroit, Hoboken, Houston, Los Angeles, McLean, Miami, New York, Charlotte, Philadelphia, San Francisco, San Jose, Seattle, St Louis, Tampa

At EY, we’re all in to shape your future with confidence.

The objective of our consulting risk services is to provide clients with a candid and reliable overview of their risk landscape.

For our Cyber Risk services, the ideal candidate will be responsible for identifying, evaluating, and managing cyber risks across the organization.

• You will operate as a fieldwork leader to assist clients in employing proper information systems, resources, and controls to maximize efficiencies and minimize risk.
• Analyze, evaluate, and enhance information systems facilitating the business internal control process.
• Assist clients and other Risk Assurance professionals in performing information technology control and security engagements.

• Collaborate with other members of the engagement team to plan the engagement and develop work program timelines, risk assessments, and other planning documents.
• Serve as a fieldwork leader by directing the daily progress of fieldwork, informing supervisors of engagement status, and managing staff performance.
• Demonstrate and apply a thorough understanding of complex information systems.
• Use knowledge of the current IT environment and industry IT trends to identify the engagement and client service issues, and communicate this information to the engagement team and client management.
• Demonstrate and apply strong project management skills, inspire teamwork and responsibility with engagement team members, and use current technology and tools to enhance the effectiveness of deliverables and services.
• Conduct comprehensive cyber risk assessments to identify vulnerabilities, threats, and potential impacts to the organization.
• Develop and implement risk mitigation strategies and controls to protect against cyber threats.
• Collaborate with IT and security teams to ensure that cybersecurity policies and procedures are up-to-date and effectively implemented.
• Monitor the cyber threat landscape and provide timely intelligence to relevant stakeholders.
• Facilitate risk management discussions with business leaders to ensure they understand their cyber risk exposure.
• Oversee the cyber risk management lifecycle, including risk identification, analysis, response, and monitoring.
• Coordinate with external partners, such as insurance providers and cybersecurity firms, to manage and transfer cyber risks where appropriate.
• Prepare and present risk reports and dashboards to senior management and the board of directors.
• Ensure compliance with relevant laws, regulations, and industry standards related to cybersecurity and data protection.
• Conduct training and awareness programs to promote a culture of cybersecurity across the organization.

• A bachelor's or master's degree
• Bachelor's degree in Information Technology, Cybersecurity, Risk Management, or a related field.
• Professional certifications such as CISSP, CISM, CRISC, or similar are highly desirable.
• Minimum of 2 years of experience in cybersecurity, risk management, or a related role.
• Strong understanding of cybersecurity frameworks (e.g., NIST, ISO 27001) and regulatory requirements.
• Proven experience in risk assessment methodologies and tools.
• Excellent analytical and problem‑solving skills.
• Strong communication and interpersonal skills, with the ability to convey complex information to non‑technical stakeholders.
• Ability to work independently and as part of a team in a fast‑paced environment.
• Travel availability: up to 50% outside assigned office location, plus commute within the region; work beyond standard hours when necessary. Valid passport required.

• A bachelor's or master's degree in business, accounting, finance, computer science, information systems, engineering, or a related discipline
• CPA, CA, CISA, CISSP, CISM, CBCP, CIA, CIPP, CGEIT certification; non‑certified hires required to attain certification for eligibility for promotion to Manager.
• Additional…