Cyber - AI Security - Senior - Consulting

We need to output only HTML fragment, using

for section headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must include sections only when posting has real specific content. Must not repeat job title as heading. Must not put Job ID etc. Must preserve all substantive info, no invention, no summarizing away detail. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, application instructions. Also remove "To make the most of your application experience..." etc. Also remove EEO statements, accommodation info, etc. Also remove "What We Look For" maybe considered part of Skills? But we need to map content to sections. We need to decide sections: About the role (intro paragraph), Responsibilities (Your Key Responsibilities), Requirements (To Qualify for the Role, You Must Have...), Qualifications maybe overlapping? Actually they have "To Qualify for the Role, You Must Have" and then "Ideally, You’ll Also Have". Could treat Requirements as mandatory qualifications, and Qualifications as preferred? But we have both Requirements and Qualifications headings allowed. We could put mandatory under Requirements, and preferred under Qualifications. Skills And Attributes For Success could go under Skills. Benefits and Pay: they have salary ranges and total rewards. So we can have Pay section with salary ranges, Benefits section with medical/dental, pension/401k, paid time off. Schedule: they mention travel estimated 25-50% (maybe schedule?). Not exactly schedule but could be considered schedule? They didn't give work hours. Travel is not schedule. Might not have schedule content, so we should not create Schedule section unless posting actually states schedule. It does not. So omit Schedule. We must not create sections with filler like "commensurate with experience". We have actual salary ranges, so Pay is okay. We need to preserve all substantive info. Must not invent or summarize away detail. So we need to include details like responsibilities bullet points, qualifications bullet points, skills bullet points, etc. Use

• for any list of duties/requirements/benefits. Use

  for prose. We need to avoid duplication. Also need to remove boilerplate like "At EY, we’re all in to shape your future with confidence..." That's part of About the role? Actually that is introductory fluff but it's substantive? It's generic marketing but maybe we keep as About the role paragraph. The instruction: remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. The intro fluff is not boilerplate; it's part of the posting. We'll keep. We need to ensure we don't include "What We Look For" etc as separate heading; we can incorporate into Skills or maybe keep as part of Skills. But we have a Skills heading; we can put the Skills And Attributes For Success there, and also incorporate What We Look For content maybe as part of Skills or About the role? Better to keep Skills section for the Skills And Attributes For Success bullet list. The "What We Look For" paragraph is more about desired traits; could be considered part of Skills or maybe About the role. To avoid missing info, we could include it as part of Skills section as additional prose. But we must not invent headings. We'll put it under Skills as prose after the list? But we need to use

  • for any list; prose can be

    . So we can have a

    after the list. Similarly, "What We Offer You" includes benefits and total rewards; we already have Benefits and Pay sections. We'll extract salary range for Pay, and benefits for Benefits. We must not include "Learn more at ey.com/us/careers." That's maybe boilerplate? It's a link; could be considered application instruction? Probably remove. We must not include "Are you ready to shape your future with confidence? Apply today." etc. That's application instruction; remove. We must not include EEO statements etc. Now craft HTML. Structure:

    About the role

    Location: Anywhere in Country At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. The Opportunity Artificial Intelligence (AI) is rapidly transforming how organizations operate, and with that transformation comes an entirely new frontier of security, governance, and risk management challenges. Organizations are grappling with securing AI pipelines, managing model-level risks, operationalizing AI governance programs, and navigating an evolving regulatory landscape specific to AI technologies. As a Senior Consultant within EY’s Cyber practice focused on AI Security, you will work with clients to assess AI risk postures, architect AI security controls, and develop governance frameworks that enable organizations to adopt and scale AI responsibly and securely. This role offers the opportunity to combine hands-on technical implementation work with strategic advisory and architecture engagements across diverse industries.

    But we need to avoid duplication: The location line "Location: Anywhere in Country" maybe minor metadata; we can fold into short

    or drop. The instruction: do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short

    or drop it. So we can include location as part of the About the role paragraph, maybe at start. We'll keep it as a short sentence. Now Responsibilities:

    Responsibilities

    • Conduct AI security assessments, evaluate AI/ML pipelines and model infrastructure, identify vulnerabilities inherent to AI systems, and develop practical, prioritized remediation strategies.
    • Architect and support the implementation of AI-SPM solutions, configure AI security tooling—including platforms and harnesses—and help clients operationalize continuous monitoring and governance controls across their AI workloads.
    • Develop AI governance frameworks, policies, and standards aligned to emerging regulatory requirements and industry guidance.
    • Assist clients in designing AI risk management programs, performing AI model risk assessments, and building AI security roadmaps that balance innovation with responsible AI principles.
    • Prepare client deliverables, technical architecture documentation, and executive-level presentations that communicate complex AI security concepts to both technical and non-technical audiences.
    • Collaborate with multidisciplinary teams to deliver high-quality work products, support project planning and management activities, mentor junior team members, and contribute to business development initiatives, thought leadership, and practice-building efforts within EY’s growing AI security capability.
    Now Requirements (mandatory qualifications):

    Requirements

    • A bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, and approximately 3–5 years of relevant experience, including at least 1–2 years in AI or machine learning security; or a graduate degree and 2–4 years of relevant experience.
    • Experience in one or more of the following areas:
      • AI security assessments, AI-SPM, or AI model risk evaluations
      • AI/ML pipeline security, model security, and MLOps security practices
      • AI governance, responsible AI policy development, and AI risk management frameworks
      • DevSecOps and CI/CD security, including hands-on experience with platforms and harnesses
      • Cloud security with specific experience securing AI workloads on platforms such as AWS, Azure, or GCP
      • AI regulatory compliance and emerging AI-specific standards and guidance
      • Cybersecurity architecture, risk management, and security controls design
      • Familiarity with AI security frameworks and guidance, including NIST AI RMF, OWASP Top 10 for LLMs, and MITRE ATLAS
      • Working knowledge of foundational cybersecurity frameworks—including NIST CSF, NIST 800-53, and ISO 27001/27002—as applied within AI-enabled environments
      • Strong Microsoft PowerPoint, Excel, and Word skills
      • Willingness to travel based on client and business needs; travel estimated at 25–50%
    But we have nested lists; maybe better to keep top-level list items each as a requirement, and for the sub-items we can keep as separate
  • under a nested
    . That's okay. Now Qualifications (preferred):

    Qualifications

    • Professional certifications in cybersecurity (e.g., CISSP, CCSP, CISM) or emerging AI/ML security credentials.
    • Hands-on experience with AI-SPM platforms, MLOps tooling, and AI security automation technologies.
    • Experience with CI/CD orchestration and integrated security tooling, including harnesses, to enforce automated security gates within AI development pipelines.
    • Knowledge of adversarial machine learning techniques, model explainability requirements, and AI supply chain risk management.
    • Exposure to AI-related regulatory developments, including the EU AI Act, NIST AI RMF, and sector-specific AI guidance applicable to financial services, healthcare, or critical infrastructure.
    • Experience facilitating client workshops, technical design sessions, and AI security architecture reviews.
    • Background in software development, data engineering, or ML engineering that informs deep technical AI security expertise.
    • Experience within a consulting, professional services, or advisory environment.
    Now Skills:

    Skills

    Strong understanding of AI/ML systems, architectures, and deployment patterns, including large language models (LLMs), generative AI, and MLOps pipelines. Hands-on experience with AI Security Posture Management (AI-SPM) tools, platforms, and methodologies. Ability to identify and assess security risks specific to AI systems, including prompt injection, model poisoning, data exfiltration, supply chain vulnerabilities, and adversarial attacks. Experience configuring and operationalizing AI security and DevSecOps tooling, including platforms and harnesses, to enforce security controls within AI development and deployment pipelines. Knowledge of AI governance frameworks, responsible AI principles, and emerging AI-specific regulatory requirements. Strong critical thinking, analytical, and problem-solving skills applied to complex AI security and risk challenges. Ability to communicate technical AI security concepts effectively to both engineering teams and executive stakeholders. Experience developing technical architecture documentation, executive presentations, and client-facing deliverables. Strong verbal and written communication skills. Ability to manage competing priorities in a fast-paced consulting environment. Strong attention to detail and commitment to high-quality client service. Ability to build relationships and collaborate effectively across multidisciplinary teams and client organizations. Demonstrated initiative, adaptability, and a commitment to staying current with the rapidly evolving AI security landscape.

    We are seeking professionals who are deeply curious about the intersection of artificial intelligence and cybersecurity, with the hands-on technical capabilities to assess and architect secure AI systems alongside the advisory acumen to guide organizational AI governance strategies. Successful candidates combine technical depth in AI security with strong business judgment and can engage confidently with both engineering teams and executive stakeholders. The ideal candidate is motivated by the challenge of securing transformative and rapidly evolving technologies, committed to delivering exceptional client outcomes, and eager to help shape and grow EY’s Cyber practice.

    Now Pay:

    Pay

    The salary range for this job is: New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $125,800 to $209,700; Bay Area California offices – $131,100 to $218,500; All other offices locations in the US, including Sacramento – $104,800 to $192,200. Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography.

    Now Benefits:

    Benefits

    In addition, our Total Rewards package includes medical and dental coverage, pension and 4