DirectJobHub
Jobs · Legal · Texas

Government and Public Sector - Service Delivery Center - Cybersecurity Risk Senior Analyst

EY · San Antonio, TX · 2 mo ago
HybridLegal$78k–$141k/yrFull-time

About the role

EY’s Government & Public Sector practice delivers consulting and audit services to Federal, State, Local, and Education clients, helping them implement new ideas to achieve mission outcomes. As part of the Cybersecurity – Strategy, Risk, Compliance & Resiliency (SRC&R) team within the Service Delivery Center, you will assist clients in aligning security management strategies with business goals by assessing, designing, training, implementing, and operating cybersecurity processes and solutions. This role provides seasoned cybersecurity troubleshooting, analysis, and technical expertise, oversees junior team members, and serves as an escalation point for complex technical issues.

Responsibilities

  • Design and assess security architecture for technologies such as SaaS, PaaS, IaaS, AI/ML, and Zero Trust Architecture (ZTA).
  • Develop and implement application and cloud security architectures, primarily in AWS, as well as Azure and Oracle.
  • Ensure compliance with cybersecurity frameworks including NIST 800-53, NIST 800-171, OWASP, CIS, STIG, SOX, CMMC, and DFAR requirements.
  • Conduct network security assessments focusing on ZTA, secure connectivity (Firewall Ingress/Egress), data encryption, and key management.
  • Manage workload independently, escalate issues proactively, and collaborate directly with Product Owners to explain technical architecture requirements.
  • Lead and motivate the Service Delivery Center team, providing technical leadership for SRC&R service operations and delivery.
  • Guide on-site GPS SRC&R consultants in identifying process improvements, enhancing existing solutions, and operating SRC&R processes.
  • Assess cybersecurity controls, programs, and strategies using proprietary and industry frameworks.
  • Operate SRC&R solutions based on engagement-defined policies and procedures.
  • Develop and operate cybersecurity measurements and monitoring.
  • Contribute to cybersecurity strategy and roadmap development.
  • Enhance, operate, and govern NIST Risk Management Framework and Assessment and Authorization processes.
  • Support cybersecurity-focused Supply Chain Risk Management and Third-Party Risk Management operations, assessments, and enablement.
  • Design and re-engineer cybersecurity processes.
  • Drive high-quality work products within expected timeframes while managing progress and risk.
  • Use knowledge of industry trends to identify engagement and client service issues, communicating insights to the on-site engagement team.
  • Stay informed of current cybersecurity industry trends relevant to delivered services.

Requirements

  • Bachelor’s degree in a related field.
  • Minimum of 3 years of related work experience.
  • Ability to obtain and maintain a Secret-level clearance or higher.
  • Experience in one or more of the following areas:
    • Cybersecurity assessments.
    • IT and cybersecurity policies, standards, procedures, and controls.
    • Cybersecurity strategies and roadmaps.
    • Cybersecurity awareness and training.
    • Cybersecurity metrics and reporting.
    • Cybersecurity organization design and implementation.
    • Cybersecurity and risk management solution design and implementation (e.g., SNOW IRM, Archer GRC, RiskLens, Azure Security Center).
    • Federal RMF solution operations (e.g., eMass CSAM, Xacta).
    • Cybersecurity and IT architecture (e.g., cloud security architect, security architect).
  • Flexibility to travel up to 20%.
  • Expected in-person engagement of 60% to support effective teaming and delivery, subject to client and business requirements.

Skills

  • Working knowledge of security frameworks and standards such as ISO 27001/2, PCI DSS, NIST 800-53, NIST CSF, and cybersecurity laws and regulations like FISMA.
  • Ability to produce high-quality work products within expected timeframes.
  • Leadership experience.
  • Ideally, CISSP, CISM, CISA, CIPT, CIPM, CIPP, CRISC, or other relevant certification.
  • Prior experience in a service delivery center or similar environment.

Benefits

  • Comprehensive compensation and benefits package, including medical, dental, pension, and 401(k) plans.
  • Flexible vacation policy based on personal circumstances.
  • Paid time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence.

Pay

The base salary range for this job in most geographic locations in the US is $77,500 to $140,900. The range for New York City Metro Area, Washington State, and California (excluding Sacramento) is $92,900 to $160,500. Individual salaries are determined by factors including education, experience, knowledge, skills, and geography.

Schedule

This role operates in a team-led and leader-enabled hybrid model, with an expectation for most people in external, client-serving roles to work in person 40-60% of the time over the course of an engagement, project, or year.

Similar jobs