Join EY's Risk Consulting team as a Manager in Digital Risk, specializing in Cybersecurity. You will lead engagements focused on assessing and validating cybersecurity controls, ensuring alignment with business objectives and regulatory requirements. This role offers a unique opportunity to build a distinctive career within a global, inclusive culture, leveraging technology to foster innovation and shape a better working world.

Our Cyber Risk services aim to provide clients with a clear understanding of their risk landscape. By working closely with IT, security teams, and business units, you will help organizations strengthen their cyber resilience and build trust with stakeholders.

As a Fieldwork Leader, you will assess and monitor key information security risks, guiding clients through their risk landscapes. You will analyze information systems, identifying strategic and tactical improvement opportunities. Collaborate with engagement teams to develop work programs, risk assessments, and testing procedures. Direct daily testing activities, manage staff performance, and report on engagement status. Support cyber monitoring and response using tools like CrowdStrike, Splunk, and Microsoft Sentinel, and ensure adherence to NIST CSF 2.0 standards in reporting. Prepare detailed reports and recommendations that meet US work product quality standards.

This role requires a strong foundation in cybersecurity, including cyber risk management, resilience, and security policies. You should have proven experience leading engagements related to strategy, governance, audits, and risk assessments. A solid audit mindset is essential for designing and executing control testing across cyber and IT domains, with OT exposure being a plus. The ability to lead multi-location teams, manage risks effectively, and deliver high-quality outcomes within deadlines and budgets is critical. Excellent English communication skills, adaptability to US time zones, and the capacity to inspire teamwork are non-negotiable. Familiarity with cloud security in Azure, AWS, and GCP, along with network security fundamentals, is expected.