EY - Cybersecurity - Privileged Access Management - Manager

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

EY – Cybersecurity Manager (Privileged Access Management) Overview As a Manager in EY’s Cybersecurity practice, you will play a pivotal role in delivering advanced cybersecurity solutions across a broad spectrum of domains. We are seeking a Privileged Access Management (PAM) Manager to support enterprise PAM programs, administering, deploying, and overseeing Delinea Secret Server, CyberArk PAS, or BeyondTrust PAM across both IT and Operational Technology (OT) environments. The role supports multiple client environments, ensuring secure privileged credential management, privileged session governance, least-privilege enforcement, and regulatory compliance. The successful candidate will lead PAM transformation initiatives, drive adoption of privileged access controls, and support clients in reducing cyber risk associated with privileged accounts and administrative access.   The Opportunity We are seeking cybersecurity professionals with 12+ years of experience in Cybersecurity Consulting, Identity Security, Privileged Access Management, Security Operations, or Infrastructure Security. The ideal candidate will possess deep expertise in enterprise PAM technologies, privileged account governance, privileged session management, credential vaulting, and risk reduction strategies. Candidates should demonstrate the ability to lead client engagements, mentor junior team members, and contribute to the growth of EY’s Identity Security and Cybersecurity practice. High-performing individuals who demonstrate leadership, innovation, and alignment with EY’s values and talent policies may be considered for accelerated career progression and long-term leadership roles within the firm.   Key Responsibilities

Delinea Secret Server, CyberArk PAS & BeyondTrust PAM Administration & Engineering

Deploy, configure, and administer Delinea Secret Server, CyberArk PAS, and BeyondTrust PAM across multiple client environments. Design and implement PAM architectures aligned with business and security requirements. Configure credential vaulting, password rotation, and privileged account onboarding processes. Support onboarding of servers, databases, applications, cloud platforms, network devices, and privileged service accounts. Configure automated password management and credential lifecycle controls. Implement high-availability, disaster recovery, and PAM resilience capabilities. Support platform upgrades, patching, configuration management, and performance optimization activities. Lead client onboarding activities including architecture reviews, security assessments, and deployment planning.

Privileged Access Governance

Establish and maintain privileged access governance frameworks. Implement least privilege and Just-In-Time (JIT) access principles. Design privileged account lifecycle management processes. Develop privileged access policies, standards, and operational procedures. Conduct privileged account discovery, analysis, and rationalization activities. Support segregation of duties and administrative account governance initiatives. Participate in privileged access reviews and certification activities. Drive continuous improvement initiatives to strengthen privileged access controls.

Privileged Session Management & Monitoring

Configure and manage privileged session monitoring and recording capabilities. Monitor privileged account activities and investigate suspicious access events. Support implementation of session control, approval workflows, and access authorization mechanisms. Collaborate with SOC and Incident Response teams