Full-Time

Domain Expert Cyber AI-Augmented Delivery Senior Manager / Director

Updated on 9/4/2026

Ernst & Young

Ernst & Young

10,001+ employees

Provides consulting, assurance, and tax services

Compensation Overview

€72k - €80k/yr

+ Performance bonus

Milan, Metropolitan City of Milan, Italy

Hybrid

Hybrid work is offered without centrally prescribed office days.

Category
Business & Strategy (1)
Required Skills
Power BI
Cybersecurity
Vulnerability Analysis

Get referred to Ernst & Young

See people who can refer or advise you

Requirements
  • At least 8 years of experience in cybersecurity consulting, security operations, cyber transformation, or workforce transformation.
  • Deep knowledge of consulting delivery and managed-services economics, including pyramid structure, utilization models, pricing, and margin dynamics.
  • Proven experience designing and implementing large-scale operating-model or workforce-transformation programs.
  • Strong cybersecurity domain expertise covering the CISO agenda, security operations and security operations centers, vulnerability management, threat management, regulatory matters, and compliance, with the ability to engage with CISOs and Service Line leadership.
  • AI literacy sufficient to understand where and how artificial intelligence reshapes security delivery, without requiring deep technical expertise.
  • Strong change-management and stakeholder-engagement capabilities, with the ability to work with practice and country leadership.
  • Excellent English-language proficiency.
Responsibilities
  • Support the redesign of the cybersecurity delivery model by integrating artificial intelligence, playbooks, and digital accelerators as standard engagement components across security operations centers, vulnerability management, threat intelligence, detection and response, and security testing.
  • Collaborate with Service Line leadership to test and scale AI-augmented delivery models across security practice areas, including security operations centers, vulnerability management, identity and access management, operational technology and Internet of Things security, and governance, risk, and compliance.
  • Define and govern the integration of security guardrails, auditability controls, and compliance requirements, including the EU Artificial Intelligence Act, General Data Protection Regulation, Network and Information Security Directive 2, and Digital Operational Resilience Act, into AI products and agentic assets by design.
  • Govern the integration of Cyber+ agentic assets into the AI+ product portfolio, ensuring architectural, product, and experience coherence while maximizing reuse of available global blueprints.
  • Define industrialization, certification, security-assurance, and release criteria for cybersecurity assets delivered to engagement teams.
  • Optimize artificial-intelligence and agentic investments in cybersecurity through business cases, prioritization criteria, and make, buy, or reuse evaluations.
  • Define and monitor workforce-transformation key performance indicators, including skill-adoption rate, delivery-efficiency gain, artificial-intelligence utilization per engagement, and productivity increase.
  • Lead the organizational change management needed to embed AI ways of working in practices through communication, training, incentives, and role redesign.
  • Ensure consistent adoption across practice and country leadership by leveraging lessons learned and best practices across geographies.
Desired Qualifications
  • Familiarity with agentic assets, AI product blueprints, and cross-country reuse models.
  • Experience with outcome-based pricing, value-based selling, or monetization models for AI assets.
  • Knowledge of value-measurement, business-case, and AI-investment portfolio-governance frameworks.
  • Familiarity with security frameworks and standards such as NIST Cybersecurity Framework, ISO 27001, and MITRE ATT&CK, and with relevant regulations including the EU Artificial Intelligence Act, General Data Protection Regulation, Network and Information Security Directive 2, and Digital Operational Resilience Act.
  • CISSP, CISM, or CRISC certification.

EY (Ernst & Young) is a global professional services firm that provides consulting, assurance, tax, and transaction advisory services across industries such as energy, healthcare, financial services, and real estate. Its work centers on helping clients solve critical business challenges by offering high-value advisory support in areas like supply chain, cybersecurity, sustainability, and digital transformation; revenue comes from fees for consulting, audit, and advisory services. What sets EY apart is its breadth of services across multiple disciplines, deep industry knowledge, and emphasis on thought leadership and research to inform clients’ strategic decisions. The firm aims to help organizations improve operational efficiency, navigate regulatory environments, and stay ahead of market trends by delivering practical, evidence-based guidance and execution support.

Company Size

10,001+

Company Stage

N/A

Total Funding

N/A

Headquarters

London, United Kingdom

Founded

1991

Get referred to Ernst & Young

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • April 7, 2026, agentic AI rollout targets all end-to-end audit activities by 2028.
  • February 10, 2026, Snowflake Innovation Center widens data-cloud transformation sales.
  • EY.ai Agentic for Sales launched March 2, 2026, with Snowflake and Canva.

What critics are saying

  • July 28, 2026, FRC sanctioned EY £1.197 million for Made.com audit failures.
  • July 2026 class action targets EY over tax-team breach exposing Social Security numbers.
  • Repeated sanctions break trust and drive clients from EY audits.

What makes Ernst & Young unique

  • EY Canvas and agentic AI power 160,000 audits globally.
  • Microsoft committed $1 billion with EY on May 21, 2026.
  • EY bundles tax, assurance, consulting, and EY-Parthenon inside one platform.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Professional Development Budget

Flexible Work Hours

Remote Work Options

Company News

Yahoo Finance
Aug 31st, 2026
EY commits $100M to bonuses rewarding human skills alongside AI adoption

Ernst & Young's US division is allocating $100 million this fiscal year to bonus payments rewarding employees who demonstrate adaptability, innovation, and judgement. Individual spot awards reach $500, whilst employees or teams making significant contributions can receive between $10,000 and $25,000, five times the previous programme's ceiling. The initiative also covers AI experimentation. "What we recognise signals what we value," said Ginnie Carlier, chief talent and culture officer for EY Americas. The bonuses form part of a broader strategy to reshape employee development across all career levels. Other professional services firms are pursuing similar approaches. KPMG restructured its audit internship this summer to emphasise critical thinking, whilst PwC US introduced training combining AI proficiency with human qualities like empathy. EY reported AI-related revenue grew 30% year-over-year in 2025.

Consultancy.eu
Aug 28th, 2026
EY-Parthenon acquires Dutch digital strategy consultancy SparkOptimus

EY-Parthenon has acquired SparkOptimus, a Dutch digital strategy consultancy founded in 2010. The Amsterdam-based firm employs around 50 consultants and specialises in AI transformation, digital business model redesign and technology-driven transformation. SparkOptimus founders Alexandra Jankovich and Tom Voskes, both former McKinsey consultants, said joining EY-Parthenon will create significant value for clients and staff whilst providing access to broader capabilities. The acquisition marks EY-Parthenon's first European deal since 2021. EY-Parthenon, established in 2014, is EY's strategy consulting and transactions advisory business with around 25,000 professionals globally. Mark Reich, Partner at EY-Parthenon Netherlands, said SparkOptimus' expertise will complement existing capabilities in the Dutch market. The deal closes on 1 September 2026. Financial terms were not disclosed.

Yahoo Finance
Aug 18th, 2026
KPMG and EY win $579M UK civil servants training contract despite consultancy spending pledge

The UK Government has awarded a contract worth up to £456 million to KPMG and EY to train civil servants, the Financial Times reported, citing government procurement tracker Tussell. Under the arrangement, the firms will train officials across various skills areas, including AI, between 2026 and 2028. KPMG's share is capped at £319 million, representing almost a quarter of its total UK advisory net sales from last year. EY's portion is worth £137 million, equivalent to around 13% of its UK consulting revenue. The deal is the largest single contract awarded to Big Four companies since Tussell started tracking records in 2012. The previous record was a £322 million deal between the Foreign Office and PricewaterhouseCoopers in 2012.

Business Insider
Jul 30th, 2026
EY's 'invisible' AI router cuts token costs by 60% by directing queries to cheaper models

EY has introduced an "invisible" AI router to manage internal AI spending, helping cut token consumption by up to 60% since its April rollout. The router sits behind specialised AI tools and directs employee queries to the most appropriate model for each task, rather than defaulting to the most powerful option. Token costs have become a growing concern as AI providers increasingly charge based on usage. EY's AI Pulse survey found that 82% of senior leaders at companies investing in AI were worried about token usage. The router has been deployed on department-specific platforms, including tax and risk functions, though not on the general Microsoft Copilot chatbot available to all staff. EY has also implemented token budgets based on employees' roles and departments. The firm's global consulting AI leader Dan Diasio said companies should focus AI investment on areas with the deepest impact rather than spreading resources thinly.

Yahoo Finance
Jul 29th, 2026
FRC fines EY $1.5M over Made.com audit failures before 2022 collapse

The UK's Financial Reporting Council has fined EY nearly £1.2m and audit partner Julie Carlyle £49,000 for failings in their 2021 audit of Made.com. Both received severe reprimands for breaching international auditing standards regarding going concern and deferred tax assets. The FRC said the auditors relied on management forecasts without sufficient challenge or adequate testing. Made.com, an online furniture retailer that listed on the London Stock Exchange in June 2021, entered administration in November 2022 after reporting a £35.3m loss. EY later disclaimed its opinion on Made.com's 2022 interim statements due to material uncertainty about the company's ability to continue operating.