Cyber - AI Security - Manager - Consulting

EY•Hartford, DC

6d•$144,900 - $302,100•Remote

About The Position

Artificial Intelligence (AI) is rapidly transforming how organizations operate, and with that transformation comes an entirely new frontier of security, governance, and risk management challenges. Organizations are grappling with securing AI pipelines, managing model-level risks, operationalizing AI governance programs, and navigating an evolving regulatory landscape specific to AI technologies. As a Manager within EY's Cyber practice focused on AI Security, you will lead client engagements that span AI risk assessments, AI Security Posture Management (AI-SPM), AI governance program design, and secure AI architecture. This role offers the opportunity to drive meaningful client outcomes, lead high-performing teams, and help organizations navigate one of the most complex and consequential frontiers in cybersecurity—while building a differentiated practice at the intersection of AI and security.

Requirements

A bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, and approximately 5+ years of relevant experience, including at least 1–2 years in AI or machine learning security; or a graduate degree and approximately 4+ years of relevant experience.
Experience in one or more of the following areas: AI security assessments, AI-SPM, or AI model risk evaluations; AI/ML pipeline security, model security, and MLOps security practices; AI governance, responsible AI policy development, and AI risk management frameworks; DevSecOps and CI/CD security, including experience with platforms and harnesses; Cloud security with experience securing AI workloads on platforms such as AWS, Azure, or GCP; AI regulatory compliance and emerging AI-specific standards and guidance; Cybersecurity architecture, risk management, and security controls design.
Familiarity with AI security frameworks and guidance, including NIST AI RMF, OWASP Top 10 for LLMs, and MITRE ATLAS.
Working knowledge of foundational cybersecurity frameworks—including NIST CSF, NIST 800-53, and ISO 27001/27002—as applied within AI-enabled environments.
Experience supporting or leading client-facing cybersecurity or AI security engagements.
Strong written, verbal, and presentation skills.
Willingness to travel based on client and business needs; travel estimated at 25–50%.

Nice To Haves

Professional certifications in cybersecurity (e.g., CISSP, CCSP, CISM, CRISC) or emerging AI/ML security credentials.
Hands-on experience with AI-SPM platforms, MLOps tooling, and AI security automation technologies.
Experience with CI/CD orchestration and integrated security tooling, including Harness, to design and enforce automated security controls within AI development pipelines.
Knowledge of adversarial machine learning techniques, model explainability requirements, and AI supply chain risk management.
Exposure to AI-related regulatory developments, including the EU AI Act, NIST AI RMF, and sector-specific AI guidance in financial services, healthcare, or critical infrastructure.
Experience facilitating executive workshops, client steering committees, and AI security architecture reviews.
Background in software development, data engineering, or ML engineering that informs deep technical AI security credibility.
Consulting experience within a professional services environment, with a track record of managing client relationships and engagement delivery.

Responsibilities

Lead and manage AI security and AI governance engagements across a range of industries.
Oversee AI security assessments, direct AI-SPM implementations, and guide clients through the design of governance frameworks, policies, and controls that enable responsible and secure AI deployment.
Work closely with client leadership—including CISOs, CIOs, and AI program owners—to evaluate AI risk postures, facilitate workshops and architecture reviews, and translate technical findings into prioritized, executive-ready recommendations.
Provide hands-on direction in the configuration and integration of AI security tooling, including platforms and harnesses, and embed security within clients' AI development and deployment pipelines.
Manage engagement workstreams, lead and mentor teams of Senior Consultants and Consultants, and deliver high-quality client service within established timelines and budgets.
Monitor the rapidly evolving AI threat landscape, regulatory developments—including the EU AI Act and NIST AI RMF—and emerging AI security tooling, translating insights into actionable guidance for clients and EY's practice.
Contribute to business development activities, including proposal development, client presentations, thought leadership and account growth initiatives.
Collaborate with professionals across EY's Cybersecurity and AI capabilities to deliver integrated solutions.