Cyber - AI Security - Manager - Consulting

We need to output HTML fragment with sections: About the role? Actually the posting includes "Location: Anywhere in Country" then intro paragraphs. We need to use

for section headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must include a section only when posting has real, specific content. We need to extract content. We need to remove boilerplate: cookie/navigation/legal/EEO etc. Also remove duplicated lines, application instructions. We need to preserve all substantive info. We need to format: - Use

for each section heading. - Use

• for any list of duties/requirements/benefits. - Use

  for prose. We must not repeat job title as heading (the page already shows it). Not include Job ID. We need to decide sections. The posting includes: - Intro: "Location: Anywhere in Country At EY, we’re all in to shape your future with confidence...." This is like About the role / overview. - "The Opportunity" paragraph describing AI security challenges. - "Your Key Responsibilities" bullet list (actually paragraphs with sentences). We can treat as list. - "Skills And Attributes For Success" list. - "To Qualify for the Role, You Must Have" list of qualifications. - "Ideally, You'll Also Have" list (preferred qualifications). - "What We Look For" paragraph. - "What We Offer You At EY" includes description of total rewards, salary ranges, benefits. - Salary range details. - Benefits: medical and dental coverage, pension and 401(k) plans, paid time off. - Possibly schedule? Not mentioned. - Pay: salary ranges given. Thus sections: About the role (intro + opportunity), Responsibilities, Requirements (maybe Qualifications), Skills (Skills And Attributes For Success), Benefits, Pay. We need to decide if we need both Requirements and Qualifications. The posting has "To Qualify for the Role, You Must Have" which is qualifications. Also "Ideally, You'll Also Have" is preferred qualifications. Could combine into Qualifications section with required and preferred sublists? But we must not invent headings beyond allowed list. We can have Qualifications section containing both required and preferred as lists. Skills section: "Skills And Attributes For Success". Responsibilities: "Your Key Responsibilities". Benefits: medical/dental, pension/401k, paid time off. Pay: salary ranges. Schedule: not present, so omit. We need to ensure we don't include filler like "commensurate with experience". Not present. We need to remove boilerplate: EEO, accommodation, etc. Also remove "Learn more at ey.com/us/careers." maybe part of What We Offer? It's generic but could be considered boilerplate. Might keep as part of What We Offer? It's a link to careers; maybe keep as part of description but it's not substantive. Safer to remove. Also remove "Are you ready to shape your future with confidence? Apply today." etc. Also remove "To make the most of your application experience..." etc. Also remove "EY accepts applications..." etc. Also remove "For those living in California..." etc. Also remove "At EY, our values set the foundation..." etc. Also remove "Any misrepresentation..." etc. Also remove "EY | Building a better working world" etc. Also remove "EY is building a better working world..." etc. Also remove "EY provides equal employment opportunities..." etc. Also remove "EY is committed to providing reasonable accommodation..." etc. Thus we keep only substantive content: intro, opportunity, responsibilities, skills/attributes, qualifications (required and preferred), what we look for, what we offer (benefits, pay). Also maybe location? Could be part of About the role. We need to output only HTML fragment. Let's craft. Structure:

  About the role

  Location: Anywhere in Country At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. The Opportunity Artificial Intelligence (AI) is rapidly transforming how organizations operate, and with that transformation comes an entirely new frontier of security, governance, and risk management challenges. Organizations are grappling with securing AI pipelines, managing model-level risks, operationalizing AI governance programs, and navigating an evolving regulatory landscape specific to AI technologies. As a Manager within EY's Cyber practice focused on AI Security, you will lead client engagements that span AI risk assessments, AI Security Posture Management (AI-SPM), AI governance program design, and secure AI architecture. This role offers the opportunity to drive meaningful client outcomes, lead high-performing teams, and help organizations navigate one of the most complex and consequential frontiers in cybersecurity—while building a differentiated practice at the intersection of AI and security.

  But note we repeated "The Opportunity" inside; maybe we could keep as part of paragraph. Better to keep as is.

  Responsibilities

  • Lead and manage AI security and AI governance engagements across a range of industries.
  • Oversee AI security assessments, direct AI-SPM implementations, and guide clients through the design of governance frameworks, policies, and controls that enable responsible and secure AI deployment.
  • Work closely with client leadership—including CISOs, CIOs, and AI program owners—to evaluate AI risk postures, facilitate workshops and architecture reviews, and translate technical findings into prioritized, executive-ready recommendations.
  • Provide hands-on direction in the configuration and integration of AI security tooling, including platforms and harnesses, and embed security within clients' AI development and deployment pipelines.
  • Manage engagement workstreams, lead and mentor teams of Senior Consultants and Consultants, and deliver high-quality client service within established timelines and budgets.
  • Monitor the rapidly evolving AI threat landscape, regulatory developments—including the EU AI Act and NIST AI RMF—and emerging AI security tooling, translating insights into actionable guidance for clients and EY's practice.
  • Contribute to business development activities, including proposal development, client presentations, thought leadership and account growth initiatives, and collaborate with professionals across EY's Cybersecurity and AI capabilities to deliver integrated solutions.

  Skills and Attributes for Success

  • Deep knowledge of AI/ML systems, architectures, and deployment patterns—including LLMs, generative AI, and MLOps pipelines—and the security risks they introduce.
  • Ability to work closely with Senior Managers, Partners, and client executives to define engagement scope, manage expectations, and deliver successful outcomes.
  • Experience advising organizations on AI security posture, AI governance program design, and responsible AI risk management.
  • Hands-on familiarity with AI-SPM platforms and AI security tooling, including DevSecOps platforms and harnesses, with the ability to guide technical implementation teams.
  • Ability to deliver high-quality work products within budget and established deadlines.
  • Strong analytical, problem-solving, and critical-thinking skills applied to complex AI security and governance challenges.
  • Ability to communicate technical AI security concepts clearly to both engineering teams and executive audiences.
  • Strong presentation, facilitation, and stakeholder management skills.
  • Experience leading and developing teams in a collaborative, fast-paced consulting environment.
  • Commitment to quality, continuous learning, and staying current with the rapidly evolving AI security landscape.

  Qualifications

  Required:

  • A bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, and approximately 5+ years of relevant experience, including at least 1–2 years in AI or machine learning security; or a graduate degree and approximately 4+ years of relevant experience.
  • Experience in one or more of the following areas:
    • AI security assessments, AI-SPM, or AI model risk evaluations
    • AI/ML pipeline security, model security, and MLOps security practices
    • AI governance, responsible AI policy development, and AI risk management frameworks
    • DevSecOps and CI/CD security, including experience with platforms and harnesses
    • Cloud security with experience securing AI workloads on platforms such as AWS, Azure, or GCP
    • AI regulatory compliance and emerging AI-specific standards and guidance
    • Cybersecurity architecture, risk management, and security controls design
    • Familiarity with AI security frameworks and guidance, including NIST AI RMF, OWASP Top 10 for LLMs, and MITRE ATLAS
    • Working knowledge of foundational cybersecurity frameworks—including NIST CSF, NIST 800-53, and ISO 27001/27002—as applied within AI-enabled environments
    • Experience supporting or leading client-facing cybersecurity or AI security engagements
    • Strong written, verbal, and presentation skills
    • Willingness to travel based on client and business needs; travel estimated at 25–50%

  Preferred:

  • Professional certifications in cybersecurity (e.g., CISSP, CCSP, CISM, CRISC) or emerging AI/ML security credentials.
  • Hands-on experience with AI-SPM platforms, MLOps tooling, and AI security automation technologies.
  • Experience with CI/CD orchestration and integrated security tooling, including Harness, to design and enforce automated security controls within AI development pipelines.
  • Knowledge of adversarial machine learning techniques, model explainability requirements, and AI supply chain risk management.
  • Exposure to AI-related regulatory developments, including the EU AI Act, NIST AI RMF, and sector-specific AI guidance in financial services, healthcare, or critical infrastructure.
  • Experience facilitating executive workshops, client steering committees, and AI security architecture reviews.
  • Background in software development, data engineering, or ML engineering that informs deep technical AI security credibility.
  • Consulting experience within a professional services environment, with a track record of managing client relationships and engagement delivery.
  But we need to keep only allowed headings: Qualifications is allowed. We used Qualifications. Good. We also need Skills section (we used Skills and Attributes for Success). That's okay. We also need Benefits and Pay sections. Benefits: medical and dental coverage, pension and 401(k) plans, wide range of paid time off options. We can list as
  . Pay: salary ranges as given. We need to include the salary range details exactly. We should not include "Learn more at ey.com/us/careers." etc. We also have "What We Look For" paragraph; maybe we can incorporate into About the role or separate? Could be its own section but not in allowed headings. Could be part of About the role or Skills? Probably we can omit as it's somewhat generic but still substantive. However we must preserve ALL substantive information; we cannot omit "What We Look For" if it's substantive. It says: "We seek professionals who combine deep AI security expertise with strong consulting and leadership capabilities. The ideal candidate can build trusted relationships with client executives, direct technically sophisticated teams, and deliver practical, well-grounded recommendations that help organizations govern and secure AI responsibly. Successful candidates bring the hands-on technical credibility to engage meaningfully with engineering teams alongside the communication skills and business acumen to advise at the executive level—and the drive to help EY build a market-leading AI security practice." That is substantive. We could include it under a section like "What We Look For" but not allowed heading. Could we incorporate into Skills or Qualifications? It's more about desired attributes