Join a global leader dedicated to building a better working world by hiring and nurturing passionate individuals. At EY, we foster a culture of growth, offering training, opportunities, and creative freedom. We believe your career is yours to build, with limitless potential and fulfilling experiences to help you become your best professional self.

This Manager role is within the National Markets team, specifically focusing on CBS - C&I Global Markets/Client Service. The Markets team drives revenue growth by supporting account teams, understanding client businesses, and aligning services with their most pressing issues across Assurance, Consulting, Strategy and Transactions, and Tax. We leverage EY methodologies, insights, and tools to ensure rigorous engagements and meaningful client conversations.

Your key responsibilities include owning and managing the vulnerability management program end-to-end, from discovery to closure. You will govern the timely remediation of vulnerabilities identified through various security testing methods, partnering closely with engineering, DevOps, and security teams. This involves building governance cadences, dashboards, and reports to track vulnerability aging, SLA adherence, and remediation velocity for leadership.

Further responsibilities include embedding vulnerability management into the software development lifecycle and CI/CD pipelines, analyzing execution metrics to identify trends and drive corrective actions. You will define and improve processes, policies, and standards for software asset risk governance and act as a liaison between technical teams, security, and leadership, ensuring transparent communication on vulnerability and risk posture.

To qualify for this role, you must possess 6-10 years of experience in software, with 4-8 years specifically in technical program management. A Bachelor of Technology in Computer Science and a Master of Computer Applications are required.

We are looking for individuals with program and project management experience in technology environments, including strong exposure to DevOps and security testing practices. Working knowledge of vulnerability management tools and processes (SAST, DAST, SCA, penetration testing) is essential. You should have a strong process orientation, attention to detail, and a structured approach to program governance. An analytical mindset, the ability to draw insights from data, and a knack for rapid technical learning are crucial. Comfort with emerging technologies, including AI, and an understanding of business principles, software security, and process improvement methodologies are also expected. Excellent stakeholder management and communication skills are vital for governing outcomes across cross-functional teams.