EY - Cybersecurity - Privileged Access Management - Manager
EY
EY
Join EY's dynamic Cybersecurity practice as a Manager specializing in Privileged Access Management (PAM). This role is integral to delivering cutting-edge cybersecurity solutions, focusing on enterprise PAM programs. You'll be responsible for administering, deploying, and overseeing key PAM technologies like Delinea Secret Server, CyberArk PAS, and BeyondTrust PAM within both IT and Operational Technology (OT) environments.
This position supports diverse client landscapes, ensuring robust management of privileged credentials, effective privileged session governance, strict enforcement of least-privilege principles, and adherence to regulatory mandates. You will spearhead PAM transformation initiatives, champion the adoption of advanced privileged access controls, and guide clients in mitigating cyber risks associated with administrative accounts and elevated access.
Build an exceptional career at EY, leveraging global scale, inclusive culture, and advanced technology to reach your full potential. Your unique perspective is valued as we strive to improve our services and build a better working world for everyone.
Administer and engineer Delinea Secret Server, CyberArk PAS, and BeyondTrust PAM solutions across multiple client environments. Design and implement robust PAM architectures aligned with security and business needs, configuring credential vaulting, password rotation, and onboarding processes for various assets.
Establish and maintain strong privileged access governance frameworks, implementing least privilege and Just-In-Time (JIT) access models. Develop comprehensive privileged access policies, standards, and operational procedures while conducting regular account discovery and rationalization.
Configure and manage privileged session monitoring and recording capabilities, investigating suspicious activities and collaborating with security operations teams. Support audit and forensic investigations by providing necessary logs and developing insightful reporting dashboards.
Implement PAM controls specifically for industrial and operational technology environments, securing access for critical systems like SCADA and PLCs, while ensuring operational continuity and compliance with industrial cybersecurity standards.
Lead PAM operations, serving as an escalation point for critical issues and conducting health checks and risk assessments. Drive continuous improvement, process optimization, and service enhancements, effectively communicating technical concepts to senior stakeholders and mentoring junior team members.
We are seeking experienced cybersecurity professionals with a minimum of 12 years in Cybersecurity Consulting, Identity Security, Privileged Access Management, Security Operations, or Infrastructure Security. A strong command of enterprise PAM technologies, privileged account governance, session management, credential vaulting, and risk reduction strategies is essential.
Essential qualifications include a B.Tech or M.Tech in Cybersecurity, Information Security, Computer Science, or a related field. Demonstrated hands-on experience with Delinea Secret Server, CyberArk PAS, and BeyondTrust PAM is required, alongside a solid understanding of Privileged Account Management, Session Management, Password Vaulting, Service Account Management, Least Privilege, JIT Access, and Privileged Access Governance.
Proven experience securing enterprise privileged accounts across servers, databases, applications, cloud platforms, and network devices is expected. Familiarity with IT and/or OT PAM operations and strong English communication skills are necessary. Proficiency in scripting languages like PowerShell, Python, or SQL, and experience with enterprise PAM transformation programs are highly desirable.
EY Global Delivery Services ( EY GDS)
Information Technology & Services