Cyber - Enterprise Security Architect - Manager - Consulting
for section headings. Use - for any list of duties/requirements/benefits, and
for prose. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning, duplicated lines, application instructions. Also remove "Are you ready to shape your future with confidence? Apply today." etc. Also remove "To make the most of your application experience..." etc. Also remove EEO statements at end. Also remove "EY | Building a better working world" etc. Also remove location line? It's metadata; we can fold minor metadata into a short
or drop it. Probably include location as a short
at top.
We need to preserve all substantive information. So we need to keep the description about EY, the opportunity, responsibilities, skills, qualifications, ideal qualifications, what we look for, what we offer (including salary ranges and benefits). Also maybe include travel percentage.
We need to format as HTML fragment only.
Let's extract content.
First line: "Location: Anywhere in Country". We'll make a
Location: Anywhere in Country
.
Then introductory paragraph: "At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world." That's prose; we can put in .
Then "The Opportunity" heading: we can make
The Opportunity
then paragraph(s). The opportunity text: "As organizations undertake large-scale digital transformation, cloud migration, and technology modernization initiatives, the need for robust, scalable security architecture has never been greater. Security architecture decisions made today define an organization's risk posture for years to come—shaping how data is protected, how systems are connected, and how threats are detected and contained. As a Manager within EY's Cyber practice focused on Enterprise Security Architecture, you will lead client engagements spanning architecture assessments, Zero Trust program design, cloud security architecture, and security governance—driving meaningful outcomes that align security investment with business strategy. This role offers the opportunity to combine technical architecture leadership with client advisory and team development across diverse industries."
We'll put that in .
Then "Your Key Responsibilities": heading
Your Key Responsibilities
. Then list of responsibilities. The text includes multiple sentences; we can break into - items. Let's extract bullet points:
- lead and manage security architecture engagements across a range of industries.
- oversee security architecture assessments, direct future-state architecture design initiatives, and guide clients through the development of architecture standards, governance frameworks, and security patterns that embed security into technology and business change programs.
- work closely with client leadership—including CISOs, enterprise architects, and technology executives—to evaluate security posture across network, cloud, application, data, and identity domains, facilitate architecture review sessions, and translate technical findings into prioritized, executive-ready recommendations.
- provide hands-on direction across Zero Trust architecture programs, cloud security design, and DevSecOps integration initiatives, ensuring that security architecture decisions are grounded in both technical rigor and business context.
- manage engagement workstreams, leading and mentoring teams of Senior Consultants and Consultants, and delivering high-quality client service within established timelines and budgets.
- monitor developments across the security architecture landscape—including emerging threats, evolving cloud security capabilities, and regulatory requirements—and translate insights into actionable guidance for clients and EY's practice.
- contribute to business development activities, including proposal development, client presentations, thought leadership and account growth initiatives, and collaborate with professionals across EY's Cyber and broader technology capabilities to deliver integrated, cross-disciplinary client solutions.
We'll put each as
- .
Then "Skills And Attributes For Success": heading
Skills And Attributes For Success
. Then list of skills. The paragraph includes many sentences; we can break into bullet list.
Let's extract bullet points:
- Deep knowledge of enterprise security architecture principles, patterns, and frameworks, with the ability to lead design initiatives across network, cloud, application, data, identity, and endpoint security domains.
- Ability to work closely with Senior Managers, Partners, and client executives to define engagement scope, manage expectations, and deliver successful architecture outcomes.
- Experience advising organizations on security architecture strategy, Zero Trust program design, cloud security architecture, and security governance.
- Hands-on familiarity with security architecture tooling—including architecture modeling platforms, threat modeling tools, and cloud-native security services—with the ability to guide technical teams in their application.
- Ability to deliver high-quality work products within budget and established deadlines.
- Strong analytical, problem-solving, and critical-thinking skills applied to complex security architecture challenges.
- Ability to communicate technical architecture concepts clearly to both engineering teams and executive audiences.
- Strong presentation, facilitation, and stakeholder management skills, including experience leading architecture review board sessions and executive workshops.
- Experience leading and developing teams in a collaborative, fast-paced consulting environment.
- Commitment to quality, continuous learning, and staying current with an evolving technology and threat landscape.
We'll put each as - .
Then "To Qualify for the Role, You Must Have": heading
To Qualify for the Role, You Must Have
. Then list of qualifications.
Extract bullet points:
- A bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, and approximately 5+ years of relevant experience; or a graduate degree and approximately 4+ years of relevant experience.
- Experience in one or more of the following areas:
* Enterprise security architecture assessments and future-state architecture design
* Network security architecture, including segmentation, secure access, and perimeter design
* Cloud security architecture across AWS, Azure, or GCP, including IaaS, PaaS, and SaaS security
* Identity and access management architecture, including Zero Trust and privileged access design
* Application security architecture, secure SDLC, and DevSecOps integration
* Data protection architecture, including encryption, data classification, and data loss prevention
* Security architecture governance, standards development, and architecture review processes
* Knowledge of cybersecurity frameworks and standards, including NIST CSF, NIST 800-53, ISO 27001/27002, CIS Controls, and SABSA.
* Experience supporting or leading client-facing security architecture engagements, including architecture assessments, design workshops, and executive reporting.
* Strong written, verbal, and presentation skills.
* Willingness to travel based on client and business needs; travel estimated at 25–50%.
We need to format as list. The inner list could be nested but spec says use - for any list of duties/requirements/benefits. We can have top-level
with items; for the sublist we could also use - inside. That's fine.
Then "Ideally, You'll Also Have": heading
Ideally, You'll Also Have
. Then list.
Extract bullet points:
- Professional certifications such as CISSP, CCSP, SABSA Chartered Architect (SCF/SCM), TOGAF, or other relevant security architecture credentials.
- Hands-on experience with security architecture tooling, including architecture modeling platforms, threat modeling tools, and cloud-native security services.
- Experience designing and implementing Zero Trust architectures, including microsegmentation, identity-centric access, and continuous verification models.
- Knowledge of security technology domains—including SIEM, SOAR, EDR/XDR, PAM, IAM, CNAPP, and CASB—with the ability to assess and guide architectural fit within complex enterprise environments.
- Exposure to regulatory and compliance requirements—such as HIPAA, PCI DSS, FISMA, GDPR, or NYDFS—and their implications for security architecture strategy and design.
- Experience facilitating executive workshops, client steering committees, and architecture review board engagements.
- Background in software development, infrastructure engineering, or network engineering that informs deep technical architecture credibility.
- Consulting experience within a professional services environment, with a track record of managing client relationships and leading engagement delivery.
- Knowledge of regulated industries such as financial services, healthcare, life sciences, government, or critical infrastructure.
We'll list as - .
Then "What We Look For": heading
What We Look For
. Then paragraph.
Extract paragraph: "We seek professionals who combine deep technical security architecture expertise with strong consulting and leadership capabilities. The ideal candidate can build trusted relationships with client executives, direct technically sophisticated teams across complex architecture engagements, and deliver practical, well-grounded recommendations that strengthen enterprise security and enable business outcomes. Successful candidates bring the hands-on architecture credibility to engage meaningfully with engineering and technology teams alongside the communication skills and business acumen to advise at the executive level—and the drive to help EY build a market-leading Enterprise Security Architecture practice."
We'll put as .
Then "What We Offer You": heading
What We Offer You
. Then paragraph(s) about EY offer, salary ranges, benefits.
Extract: "At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers. The salary range for this job is: New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $173,900 to $290,100 Bay Area California offices – $181,200 to $302,100 All other offices locations in the US, including Sacramento – $144,900 to $265,800 Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options."
We need to remove "Learn more at ey.com/us/careers." maybe considered boilerplate? It's a link but not navigation; it's part of offer. Might keep but it's not essential. The instruction: remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. "Learn more at ey.com/us/careers." is not those; it's okay to keep. However it's a URL; we can keep as part of paragraph.
We'll put as At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers. The salary range for this job is: New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $173,900 to $290,100; Bay Area California offices – $181,200 to $302,100; All other offices locations in the US, including Sacramento – $144,900 to $265,800. Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.
We should not include the application instructions like "Are you ready to shape your future with confidence? Apply today." etc. Also remove EE
for prose. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning, duplicated lines, application instructions. Also remove "Are you ready to shape your future with confidence? Apply today." etc. Also remove "To make the most of your application experience..." etc. Also remove EEO statements at end. Also remove "EY | Building a better working world" etc. Also remove location line? It's metadata; we can fold minor metadata into a short
or drop it. Probably include location as a short
at top. We need to preserve all substantive information. So we need to keep the description about EY, the opportunity, responsibilities, skills, qualifications, ideal qualifications, what we look for, what we offer (including salary ranges and benefits). Also maybe include travel percentage. We need to format as HTML fragment only. Let's extract content. First line: "Location: Anywhere in Country". We'll make a
Location: Anywhere in Country
. Then introductory paragraph: "At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world." That's prose; we can put in. Then "The Opportunity" heading: we can make
The Opportunity
then paragraph(s). The opportunity text: "As organizations undertake large-scale digital transformation, cloud migration, and technology modernization initiatives, the need for robust, scalable security architecture has never been greater. Security architecture decisions made today define an organization's risk posture for years to come—shaping how data is protected, how systems are connected, and how threats are detected and contained. As a Manager within EY's Cyber practice focused on Enterprise Security Architecture, you will lead client engagements spanning architecture assessments, Zero Trust program design, cloud security architecture, and security governance—driving meaningful outcomes that align security investment with business strategy. This role offers the opportunity to combine technical architecture leadership with client advisory and team development across diverse industries." We'll put that in. Then "Your Key Responsibilities": heading
Your Key Responsibilities
. Then list of responsibilities. The text includes multiple sentences; we can break into- items. Let's extract bullet points: - lead and manage security architecture engagements across a range of industries. - oversee security architecture assessments, direct future-state architecture design initiatives, and guide clients through the development of architecture standards, governance frameworks, and security patterns that embed security into technology and business change programs. - work closely with client leadership—including CISOs, enterprise architects, and technology executives—to evaluate security posture across network, cloud, application, data, and identity domains, facilitate architecture review sessions, and translate technical findings into prioritized, executive-ready recommendations. - provide hands-on direction across Zero Trust architecture programs, cloud security design, and DevSecOps integration initiatives, ensuring that security architecture decisions are grounded in both technical rigor and business context. - manage engagement workstreams, leading and mentoring teams of Senior Consultants and Consultants, and delivering high-quality client service within established timelines and budgets. - monitor developments across the security architecture landscape—including emerging threats, evolving cloud security capabilities, and regulatory requirements—and translate insights into actionable guidance for clients and EY's practice. - contribute to business development activities, including proposal development, client presentations, thought leadership and account growth initiatives, and collaborate with professionals across EY's Cyber and broader technology capabilities to deliver integrated, cross-disciplinary client solutions. We'll put each as
- .
Then "Skills And Attributes For Success": heading
Skills And Attributes For Success
. Then list of skills. The paragraph includes many sentences; we can break into bullet list. Let's extract bullet points: - Deep knowledge of enterprise security architecture principles, patterns, and frameworks, with the ability to lead design initiatives across network, cloud, application, data, identity, and endpoint security domains. - Ability to work closely with Senior Managers, Partners, and client executives to define engagement scope, manage expectations, and deliver successful architecture outcomes. - Experience advising organizations on security architecture strategy, Zero Trust program design, cloud security architecture, and security governance. - Hands-on familiarity with security architecture tooling—including architecture modeling platforms, threat modeling tools, and cloud-native security services—with the ability to guide technical teams in their application. - Ability to deliver high-quality work products within budget and established deadlines. - Strong analytical, problem-solving, and critical-thinking skills applied to complex security architecture challenges. - Ability to communicate technical architecture concepts clearly to both engineering teams and executive audiences. - Strong presentation, facilitation, and stakeholder management skills, including experience leading architecture review board sessions and executive workshops. - Experience leading and developing teams in a collaborative, fast-paced consulting environment. - Commitment to quality, continuous learning, and staying current with an evolving technology and threat landscape. We'll put each as - .
Then "To Qualify for the Role, You Must Have": heading
To Qualify for the Role, You Must Have
. Then list of qualifications. Extract bullet points: - A bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, and approximately 5+ years of relevant experience; or a graduate degree and approximately 4+ years of relevant experience. - Experience in one or more of the following areas: * Enterprise security architecture assessments and future-state architecture design * Network security architecture, including segmentation, secure access, and perimeter design * Cloud security architecture across AWS, Azure, or GCP, including IaaS, PaaS, and SaaS security * Identity and access management architecture, including Zero Trust and privileged access design * Application security architecture, secure SDLC, and DevSecOps integration * Data protection architecture, including encryption, data classification, and data loss prevention * Security architecture governance, standards development, and architecture review processes * Knowledge of cybersecurity frameworks and standards, including NIST CSF, NIST 800-53, ISO 27001/27002, CIS Controls, and SABSA. * Experience supporting or leading client-facing security architecture engagements, including architecture assessments, design workshops, and executive reporting. * Strong written, verbal, and presentation skills. * Willingness to travel based on client and business needs; travel estimated at 25–50%. We need to format as list. The inner list could be nested- but spec says use
- for any list of duties/requirements/benefits. We can have top-level
- with items; for the sublist we could also use
- inside. That's fine.
Then "Ideally, You'll Also Have": heading
Ideally, You'll Also Have
. Then list. Extract bullet points: - Professional certifications such as CISSP, CCSP, SABSA Chartered Architect (SCF/SCM), TOGAF, or other relevant security architecture credentials. - Hands-on experience with security architecture tooling, including architecture modeling platforms, threat modeling tools, and cloud-native security services. - Experience designing and implementing Zero Trust architectures, including microsegmentation, identity-centric access, and continuous verification models. - Knowledge of security technology domains—including SIEM, SOAR, EDR/XDR, PAM, IAM, CNAPP, and CASB—with the ability to assess and guide architectural fit within complex enterprise environments. - Exposure to regulatory and compliance requirements—such as HIPAA, PCI DSS, FISMA, GDPR, or NYDFS—and their implications for security architecture strategy and design. - Experience facilitating executive workshops, client steering committees, and architecture review board engagements. - Background in software development, infrastructure engineering, or network engineering that informs deep technical architecture credibility. - Consulting experience within a professional services environment, with a track record of managing client relationships and leading engagement delivery. - Knowledge of regulated industries such as financial services, healthcare, life sciences, government, or critical infrastructure. We'll list as - .
Then "What We Look For": heading
What We Look For
. Then paragraph. Extract paragraph: "We seek professionals who combine deep technical security architecture expertise with strong consulting and leadership capabilities. The ideal candidate can build trusted relationships with client executives, direct technically sophisticated teams across complex architecture engagements, and deliver practical, well-grounded recommendations that strengthen enterprise security and enable business outcomes. Successful candidates bring the hands-on architecture credibility to engage meaningfully with engineering and technology teams alongside the communication skills and business acumen to advise at the executive level—and the drive to help EY build a market-leading Enterprise Security Architecture practice." We'll put as. Then "What We Offer You": heading
What We Offer You
. Then paragraph(s) about EY offer, salary ranges, benefits. Extract: "At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers. The salary range for this job is: New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $173,900 to $290,100 Bay Area California offices – $181,200 to $302,100 All other offices locations in the US, including Sacramento – $144,900 to $265,800 Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options." We need to remove "Learn more at ey.com/us/careers." maybe considered boilerplate? It's a link but not navigation; it's part of offer. Might keep but it's not essential. The instruction: remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. "Learn more at ey.com/us/careers." is not those; it's okay to keep. However it's a URL; we can keep as part of paragraph. We'll put asAt EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers. The salary range for this job is: New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $173,900 to $290,100; Bay Area California offices – $181,200 to $302,100; All other offices locations in the US, including Sacramento – $144,900 to $265,800. Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.
We should not include the application instructions like "Are you ready to shape your future with confidence? Apply today." etc. Also remove EE
- inside. That's fine.
Then "Ideally, You'll Also Have": heading
- for any list of duties/requirements/benefits. We can have top-level