EY - Cybersecurity - Privileged Access Management - Manager

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

EY - Cybersecurity Manager (Privileged Access Management)

Overview

As a Manager in EY’s Cybersecurity practice, you will play a pivotal role in delivering advanced cybersecurity solutions across a broad spectrum of domains. We are seeking a Privileged Access Management (PAM) Manager to support enterprise PAM programs, administering, deploying, and overseeing Delinea Secret Server, CyberArk PAS, or BeyondTrust PAM across both IT and Operational Technology (OT) environments.

The role supports multiple client environments, ensuring secure privileged credential management, privileged session governance, least-privilege enforcement, and regulatory compliance. The successful candidate will lead PAM transformation initiatives, drive adoption of privileged access controls, and support clients in reducing cyber risk associated with privileged accounts and administrative access.

The Opportunity

We are seeking cybersecurity professionals with 12+ years of experience in Cybersecurity Consulting, Identity Security, Privileged Access Management, Security Operations, or Infrastructure Security.

The ideal candidate will possess deep expertise in enterprise PAM technologies, privileged account governance, privileged session management, credential vaulting, and risk reduction strategies. Candidates should demonstrate the ability to lead client engagements, mentor junior team members, and contribute to the growth of EY’s Identity Security and Cybersecurity practice.

High-performing individuals who demonstrate leadership, innovation, and alignment with EY’s values and talent policies may be considered for accelerated career progression and long-term leadership roles within the firm.

Key Responsibilities

• Delinea Secret Server, CyberArk PAS & BeyondTrust PAM Administration & Engineering
  • Deploy, configure, and administer Delinea Secret Server, CyberArk PAS, and BeyondTrust PAM across multiple client environments.
  • Design and implement PAM architectures aligned with business and security requirements.
  • Configure credential vaulting, password rotation, and privileged account onboarding processes.
  • Support onboarding of servers, databases, applications, cloud platforms, network devices, and privileged service accounts.
  • Configure automated password management and credential lifecycle controls.
  • Implement high-availability, disaster recovery, and PAM resilience capabilities.
  • Support platform upgrades, patching, configuration management, and performance optimization activities.
  • Lead client onboarding activities including architecture reviews, security assessments, and deployment planning.

• Privileged Access Governance
  • Establish and maintain privileged access governance frameworks.
  • Implement least privilege and Just-In-Time (JIT) access principles.
  • Design privileged account lifecycle management processes.
  • Develop privileged access policies, standards, and operational procedures.
  • Conduct privileged account discovery, analysis, and rationalization activities.
  • Support segregation of duties and administrative account governance initiatives.
  • Participate in privileged access reviews and certification activities.
  • Drive continuous improvement initiatives to strengthen privileged access controls.

• Privileged Session Management & Monitoring
  • Configure and manage privileged session monitoring and recording capabilities.
  • Monitor privileged account activities and investigate suspicious access events.
  • Support implementation of session control, approval workflows, and access authorization mechanisms.
  • Collaborate with SOC and Incident Response teams during investigations involving privileged accounts.
  • Support audit and forensic investigations by providing privileged session records and activity logs.
  • Develop dashboards and reporting for privileged account usage, compliance, and risk monitoring.

• OT Privileged Access Management
  • Implement PAM controls for industrial and operational technology environments.
  • Secure privileged access for SCADA, DCS, PLC, HMI, engineering workstations, and administrative systems.
  • Collaborate with OT engineering, manufacturing, and critical infrastructure teams.
  • Support PAM onboarding for OT assets while maintaining operational continuity.
  • Implement privileged access controls that align with industrial cybersecurity requirements.
  • Support PAM initiatives aligned with ISA/IEC 62443 and OT security best practices.

• Security Operations & Service Delivery
  • Lead PAM operations across multiple client environments.
  • Serve as an escalation point for PAM incidents, platform issues, and critical privileged-access risks.
  • Conduct health checks, risk assessments, and PAM maturity reviews.
  • Support audit, compliance, and regulatory requirements.
  • Develop operational metrics, dashboards, and executive reporting.
  • Collaborate with infrastructure, cloud, security, and application teams to improve privileged access controls.
  • Contribute to automation, process optimization, and PAM service enhancement initiatives.
  • Communicate complex technical concepts to senior stakeholders and business leaders.
  • Mentor junior consultants and engineers, fostering a culture of learning and excellence.

Skills and Attributes for Success

• Deep understanding of Privileged Access Management concepts and technologies.
• Strong knowledge of credential vaulting, password rotation, privileged session monitoring, and privileged account governance.
• Experience implementing least privilege and Just-In-Time access models.
• Understanding of Windows, Linux, Unix, databases, cloud platforms, and network infrastructure administration.
• Knowledge of service account management and privileged identity governance.
• Familiarity with Zero Trust and identity-centric security principles.
• Experience supporting enterprise-scale PAM deployments and transformations.
• Strong analytical, problem-solving, and consulting skills.
• Excellent communication and stakeholder management abilities.
• Ability to lead teams and manage multiple engagements simultaneously.
• Business acumen and client-focused mindset.

To Qualify for the Role, You Must Have

• B. Tech or M. Tech in Cybersecurity, Information Security, Computer Science, Electronics, or related fields.
• 12+ years of relevant work experience in Privileged Access Management, Cybersecurity Engineering, Security Operations, or Cybersecurity Consulting.
• Hands-on experience with Delinea Secret Server, CyberArk PAS, and BeyondTrust PAM administration and engineering.
• Strong understanding of:
  • Privileged Account Management
  • Privileged Session Management
  • Password Vaulting
  • Credential Rotation
  • Service Account Management
  • Least Privilege
  • Just-In-Time (JIT) Access
  • Privileged Access Governance
• Experience securing enterprise privileged accounts across servers, databases, applications, cloud platforms, and network devices.
• Experience supporting PAM operations within IT and/or OT environments.
• Strong command of verbal and written English.
• Proficiency in scripting or programming languages (PowerShell, Python, SQL, REST APIs) is a plus.
• Experience delivering enterprise PAM transformation programs is preferred.

What We Look For

Professionals who are passionate about identity security and privileged access management, demonstrate leadership and innovation, and are committed to delivering impactful cybersecurity solutions within a consulting environment. A strong sense of ownership, strategic thinking, adaptability, and alignment with EY’s values will be key to success in this role.

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.