Cybersecurity Enterprise Business Architect

Cybersecurity Enterprise Business Architect

Join to apply for the Cybersecurity Enterprise Business Architect role at EY

At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

Within Information Security, we integrate risk strategy, digital identity, cyber defense, application security, and technology solutions while considering the entire security lifecycle. You will join a team of hardworking, security-focused individuals dedicated to supporting, protecting, and enabling the business through innovative, secure solutions that provide speed to market and business value. As a member of the Security Technology Services (STS) team, the Cybersecurity Enterprise Business Architect bridges the gap between high-level strategy and solution architecture, determining the future architectural direction for security technologies primarily centered around network and infrastructure protection for EY Global.

We are seeking a strategic and analytical Business Architect to lead the design and implementation of business processes within our Governance, Risk, and Compliance (GRC) and Integrated Risk Management (IRM) programs.

• Strategic direction: produce and document technology strategy primarily for the Domain Lead's security technology domain
• Thought leadership: provide security and business thought leadership at an enterprise level
• Process mapping and design: lead the mapping and design of business capabilities to current and future‑state business processes, technology solutions, and associated data architectures & models, ensuring alignment with GRC & IRM objectives
• Analytical assessment: conduct thorough analyses of existing processes to identify inefficiencies, challenges, and opportunities, providing actionable recommendations
• Stakeholder collaboration: drive engagement with key stakeholders across the organization to facilitate discussions, gather requirements, and ensure business needs are met in business architectures and implementations
• Risk integration: integrate risk management principles into business processes, ensuring that risk considerations are embedded in decision‑making and operational practices
• Governance framework development: establish and maintain governance frameworks that define process ownership, accountability, and compliance requirements
• Change management support: design processes that facilitate user adoption and provide input for training and communication strategies
• Data management oversight: ensure that business processes are supported by accurate and relevant data, collaborating with IT and data management teams to integrate necessary systems
• Documentation standards: develop and enforce documentation standards, templates, and modeling conventions to ensure consistency and clarity in process representation
• Performance metrics definition: define and implement key performance indicators (KPIs) and metrics to measure process performance, maturity, and effectiveness, using data to drive continuous improvement
• Cross‑functional leadership: lead cross‑functional teams to ensure end‑to‑end business capability and process alignment, fostering collaboration and integration across various business units and functions
• Team development: lead data and security architects through coaching, mentoring, and course correction

• Experience initiating new ideas and leading architectural activities
• Process mapping and design: ability to create detailed process maps and design future‑state processes that align with organizational objectives
• Analytical thinking: strong analytical skills to identify inefficiencies, challenges, and opportunities for improvement within existing processes
• Stakeholder engagement: excellent communication and interpersonal skills to collaborate with various stakeholders, including business leaders, analysts, and technology teams
• Risk management knowledge: understanding of risk management principles and frameworks to effectively integrate risk…