{"id":1387401,"url":"https://alion.io/job/ernst-young-ey-cybersecurity-privileged-access-management-manager","title":"EY - Cybersecurity - Privileged Access Management - Manager","company":{"id":2859,"name":"EY","domain":"ey.com","url":"https://alion.io/company/ey-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Thiruvananthapuram, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":24000,"max_usd":57000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":724},"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"BeyondTrust","optional":false},{"name":"CyberArk","optional":false},{"name":"Delinea","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SQL","optional":false},{"name":"Unix","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-09-28T10:48:29Z","employer_posted_date":"2026-09-28","last_verified_at":"2026-10-28T07:39:39Z","board_verified":true,"closed_at":null,"days_open":29,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":29},"description":"At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.\nEY - Cybersecurity Manager (Privileged Access Management)\nOverview\nAs a Manager in EY’s Cybersecurity practice, you will play a pivotal role in delivering advanced cybersecurity solutions across a broad spectrum of domains. We are seeking a Privileged Access Management (PAM) Manager to support enterprise PAM programs, administering, deploying, and overseeing Delinea Secret Server, CyberArk PAS, or BeyondTrust PAM across both IT and Operational Technology (OT) environments.\nThe role supports multiple client environments, ensuring secure privileged credential management, privileged session governance, least-privilege enforcement, and regulatory compliance. The successful candidate will lead PAM transformation initiatives, drive adoption of privileged access controls, and support clients in reducing cyber risk associated with privileged accounts and administrative access.\nThe Opportunity\nWe are seeking cybersecurity professionals with 12+ years of experience in Cybersecurity Consulting, Identity Security, Privileged Access Management, Security Operations, or Infrastructure Security.\nThe ideal candidate will possess deep expertise in enterprise PAM technologies, privileged account governance, privileged session management, credential vaulting, and risk reduction strategies. Candidates should demonstrate the ability to lead client engagements, mentor junior team members, and contribute to the growth of EY’s Identity Security and Cybersecurity practice.\nHigh-performing individuals who demonstrate leadership, innovation, and alignment with EY’s values and talent policies may be considered for accelerated career progression and long-term leadership roles within the firm.\nKey Responsibilities\nDelinea Secret Server, CyberArk PAS & BeyondTrust PAM Administration & EngineeringDeploy, configure, and administer Delinea Secret Server, CyberArk PAS, and BeyondTrust PAM across multiple client environments.\nDesign and implement PAM architectures aligned with business and security requirements.\nConfigure credential vaulting, password rotation, and privileged account onboarding processes.\nSupport onboarding of servers, databases, applications, cloud platforms, network devices, and privileged service accounts.\nConfigure automated password management and credential lifecycle controls.\nImplement high-availability, disaster recovery, and PAM resilience capabilities.\nSupport platform upgrades, patching, configuration management, and performance optimization activities.\nLead client onboarding activities including architecture reviews, security assessments, and deployment planning.\n\n Privileged Access GovernanceEstablish and maintain privileged access governance frameworks.\nImplement least privilege and Just-In-Time (JIT) access principles.\nDesign privileged account lifecycle management processes.\nDevelop privileged access policies, standards, and operational procedures.\nConduct privileged account discovery, analysis, and rationalization activities.\nSupport segregation of duties and administrative account governance initiatives.\nParticipate in privileged access reviews and certification activities.\nDrive continuous improvement initiatives to strengthen privileged access controls.\n\nPrivileged Session Management & MonitoringConfigure and manage privileged session monitoring and recording capabilities.\nMonitor privileged account activities and investigate suspicious access events.\nSupport implementation of session control, approval workflows, and access authorization mechanisms.\nCollaborate with SOC and Incident Response teams during investigations involving privileged accounts.\nSupport audit and forensic investigations by providing privileged session records and activity logs.\nDevelop dashboards and reporting for privileged account usage, compliance, and risk monitoring.\n\nOT Privileged Access ManagementImplement PAM controls for industrial and operational technology environments.\nSecure privileged access for SCADA, DCS, PLC, HMI, engineering workstations, and administrative systems.\nCollaborate with OT engineering, manufacturing, and critical infrastructure teams.\nSupport PAM onboarding for OT assets while maintaining operational continuity.\nImplement privileged access controls that align with industrial cybersecurity requirements.\nSupport PAM initiatives aligned with ISA/IEC 62443 and OT security best practices.\n\nSecurity Operations & Service DeliveryLead PAM operations across multiple client environments.\nServe as an escalation point for PAM incidents, platform issues, and critical privileged-access risks.\nConduct health checks, risk assessments, and PAM maturity reviews.\nSupport audit, compliance, and regulatory requirements.\nDevelop operational metrics, dashboards, and executive reporting.\nCollaborate with infrastructure, cloud, security, and application teams to improve privileged access controls.\nContribute to automation, process optimization, and PAM service enhancement initiatives.\nCommunicate complex technical concepts to senior stakeholders and business leaders.\nMentor junior consultants and engineers, fostering a culture of learning and excellence.\n\nSkills and Attributes for Success\nDeep understanding of Privileged Access Management concepts and technologies.\nStrong knowledge of credential vaulting, password rotation, privileged session monitoring, and privileged account governance.\nExperience implementing least privilege and Just-In-Time access models.\nUnderstanding of Windows, Linux, Unix, databases, cloud platforms, and network infrastructure administration.\nKnowledge of service account management and privileged identity governance.\nFamiliarity with Zero Trust and identity-centric security principles.\nExperience supporting enterprise-scale PAM deployments and transformations.\nStrong analytical, problem-solving, and consulting skills.\nExcellent communication and stakeholder management abilities.\nAbility to lead teams and manage multiple engagements simultaneously.\nBusiness acumen and client-focused mindset.\nTo Qualify for the Role, You Must Have\nB. Tech or M. Tech in Cybersecurity, Information Security, Computer Science, Electronics, or related fields.\n12+ years of relevant work experience in Privileged Access Management, Cybersecurity Engineering, Security Operations, or Cybersecurity Consulting.\nHands-on experience with Delinea Secret Server, CyberArk PAS, and BeyondTrust PAM administration and engineering.\nStrong understanding of:Privileged Account Management\nPrivileged Session Management\nPassword Vaulting\nCredential Rotation\nService Account Management\nLeast Privilege\nJust-In-Time (JIT) Access\nPrivileged Access Governance\n\nExperience securing enterprise privileged accounts across servers, databases, applications, cloud platforms, and network devices.\nExperience supporting PAM operations within IT and/or OT environments.\nStrong command of verbal and written English.\nProficiency in scripting or programming languages (PowerShell, Python, SQL, REST APIs) is a plus.\nExperience delivering enterprise PAM transformation programs is preferred.\nWhat We Look For\nProfessionals who are passionate about identity security and privileged access management, demonstrate leadership and innovation, and are committed to delivering impactful cybersecurity solutions within a consulting environment. A strong sense of ownership, strategic thinking, adaptability, and alignment with EY’s values will be key to success in this role.\nEY | Building a better working world\nEY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.\nEnabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.\nWorking across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.","description_format":"text","description_chars":8295,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Identity Management","Information Security","Management Consulting"],"lifecycle":[{"event":"open","at":"2026-09-28T10:48:29Z"}],"visa":[],"liveness":{"score":62,"band":"ok","label":"Likely open","p_open":1,"p_active":0.828,"p_room":0.75,"age_days":29,"expected_fill_days":31,"reasons":["conf:4","velocity","win:late","comp:brand"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/ernst-young-ey-cybersecurity-privileged-access-management-manager","json_url":"https://alion.io/job/ernst-young-ey-cybersecurity-privileged-access-management-manager.json","meta":{"generated_at":"2026-10-28T10:30:05Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13813,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2859},"rest":"https://alion.io/mcp/rest/get_company?id=2859"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fernst-young-ey-cybersecurity-privileged-access-management-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fernst-young-ey-cybersecurity-privileged-access-management-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fernst-young-ey-cybersecurity-privileged-access-management-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ernst-young-ey-cybersecurity-privileged-access-management-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fernst-young-ey-cybersecurity-privileged-access-management-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1387401}},{"tool":"search_jobs","arguments":{"company":"ey.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1387401},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}