Inactive
E

Ernst & Young

Global professional services: audit, tax, consulting

Cybersecurity Associate Manager

Security Governance, Risk & CompliancePosted on Oct 1
Full-timeBengaluru, Karnataka, IndiaNo salary listedIn-person

About the Job

Requirements

  • A postgraduate degree in business management from a premier institute and 5–8 years of applicable consulting experience are required.
  • At least 4 years of experience in Transaction Strategy, Cybersecurity Strategy, or Technology Transformation in a top-tier consulting firm are required.
  • Experience leading large IT project execution and in-depth knowledge of IT project life cycles are required.
  • Broad knowledge and deep understanding of one or more cyber areas, such as cybersecurity frameworks (for example, NIST, ISO 27001, and MITRE ATT&CK), compliance frameworks (for example, GDPR, CCPA, and HIPAA), or security architecture are required.
  • Experience using cyber maturity models, such as CMMI, NIST, or bespoke maturity models, is required.
  • Experience in technology aspects of the transaction lifecycle during mergers, acquisitions, divestitures, and carve-outs is required.
  • Working experience in post-deal lifecycle for sell-and-separate and buy-and-integrate transactions is required, including separation or integration planning, standalone models and costing, infrastructure separation, cutover management, TSA costing and exit, Day-1 planning, and logical separation.
  • Experience in business development activities such as RFPs, opportunity pursuits, and winning large to mid-sized deals is required.
  • Strong leadership and team management abilities, including experience building and motivating high-performing teams, are required.
  • The ability to engage and influence stakeholders at all levels is required.

Responsibilities

  • Identify cybersecurity risks and integration or separation challenges across buy-side and sell-side transactions.
  • Design and execute cybersecurity integration and separation plans aligned with business goals.
  • Collaborate with cross-functional teams to ensure seamless cyber integration during the sign-to-close phase.
  • Identify cyber-related risks and issues during the deal process and develop mitigation strategies.
  • Provide expertise in cyber cost optimization and consolidation after deal closure.
  • Develop comprehensive post-transaction cybersecurity strategies aligned with business and regulatory requirements.
  • Advise clients on target operating models for cybersecurity functions.
  • Conduct cyber risk assessments using frameworks such as NIST CSF and ISO 27001, and applicable regulatory requirements such as GDPR and CCPA.
  • Provide recommendations for achieving and maintaining regulatory compliance.
  • Assess and design identity and access management strategies and solutions during mergers and acquisitions activities.
  • Ensure identity security is maintained throughout integration or divestiture processes.
  • Conduct pre- and post-merger-and-acquisition cyber maturity assessments to evaluate organizations’ cybersecurity posture.
  • Create remediation roadmaps to enhance cybersecurity maturity.
  • Develop strategies to protect sensitive information assets across the data lifecycle.
  • Address data governance, classification, privacy, and protection considerations.
  • Design and advise on detection and incident-response capabilities.
  • Ensure continuity of threat monitoring and response processes during organizational transitions.
  • Manage large to mid-sized engagements or workstreams of large engagements to help clients address issues during the transaction lifecycle.
  • Support key decision-makers in developing and executing transaction strategy to secure deal value.
  • Manage the execution of integration and separation projects, ensuring they are completed on time, within budget, and to required quality standards.
  • Document lessons learned and best practices to improve future IT deal processes.
  • Assist with business development activities, including preparing internal materials, go-to-market content, and presentations for client and internal pursuit meetings; engage on larger SaT projects and pitch potential technology interventions.
  • Analyze the evolving market environment and build solutions and services to address it.
  • Develop point-of-view documents and support business development initiatives.
  • Contribute to practice development initiatives that support the team.
  • Cultivate working relationships with clients and provide support to key decision-makers.

Desired Qualifications

  • Relevant certifications such as CISSP, CCSP, CISM, or CISA are desirable.

About the Company

Ernst & Young

Global professional services: audit, tax, consulting

EY provides professional services across Assurance, Tax, Consulting, and Strategy & Transactions through member firms coordinated by EY Global. It serves clients in about 150 countries with cross-disciplinary teams delivering audits, tax planning, technology, risk management, and M&A and strategy advisory. Its global, integrated platform and large network differentiate it by offering coordinated services across disciplines. The goal is to help clients meet regulatory requirements, improve governance and performance, and create value.

Company size
1,001-5,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Boston, MA
Founded
1991

Recently Posted Jobs

Explore more opportunities at Ernst & Young

See more jobs