Government and Public Sector - Cybersecurity - Operations Project Manager

Government and Public Sector – Cybersecurity – Cyber Operations - Manager

From strategy to execution, the Government & Public Sector practice (“GPS”) of Ernst & Young LLP provides a full range of consulting and audit services to help our Federal, State, Local and Education clients implement new ideas to help achieve their mission outcomes. We deliver real change and measurable results through our diverse, high-performing teams, quality work at the highest professional standards, operational know-how from across our global organization, and creative and bold ideas that drive innovation. We enable our government clients to achieve their mission of protecting the nation and serving the people; increasing public safety; improving healthcare for our military, veterans and citizens; delivering essential public services; and helping those in need. EY is ready to help our government shape the future with confidence.

The opportunity  

Our cybersecurity professionals possess diverse industry knowledge, along with unique technical expertise and specialized skills. The team works together in planning, pursuing, delivering and managing engagements to assess, improve, build, and in some cases operate integrated security operations for our clients. 

We will support you with career-long training and coaching to develop your skills. As EY is a global leading service provider in this space, you will be working with the best of the best in a collaborative environment. So, whenever you join, however long you stay, the exceptional EY experience lasts a lifetime. 

Your key responsibilities 

As a Cyber Operations Director, you will oversee and direct cybersecurity operations, ensuring the successful implementation of enterprise-wide security programs. Your role will focus on leading multi-functional security teams, aligning cybersecurity strategy with business objectives, and enhancing the organization's security resilience. You will manage resources, budgets, and program execution to maintain operational excellence and compliance with regulatory frameworks.

This role requires extensive engagement with technical teams, executive leadership, and external stakeholders, ensuring seamless communication and alignment of security operations with mission-critical objectives. You will also be responsible for risk management, security governance, and strategic planning to address evolving cybersecurity threats.

Skills and attributes for success  

• Lead and oversee enterprise-wide cybersecurity programs, ensuring alignment with organizational goals and compliance requirements.
• Direct and manage multi-functional cybersecurity teams, including Threat Intelligence, Blue, Red, and Purple teams.
• Develop and implement strategic security roadmaps, ensuring operational resilience and proactive risk mitigation.
• Manage program budgets, resource allocation, and risk assessments to optimize security operations.
• Oversee incident response coordination and crisis management, ensuring rapid and effective response to cyber threats.
• Engage with executive leadership to communicate cybersecurity risks, strategies, and business impacts.
• Drive collaboration across security teams, IT operations, legal, and compliance functions to enhance security posture.
• Implement security frameworks and compliance standards, including NIST CSF, NIST 800-53, and FISMA.
• Ensure cybersecurity risk management and vulnerability management programs are effectively integrated into business operations.
• Spearhead security automation, AI-driven analytics, and continuous monitoring initiatives.
• Develop and maintain key performance indicators (KPIs) and reporting metrics to measure security effectiveness.
• Provide strategic advisory and mentorship to security teams, fostering a culture of continuous improvement.

To qualify for the role you must have  

• Bachelor’s degree in Computer Science, Information Systems, Engineering, Business, or a related field, and a minimum of 15 years of related work experience; or a Master’s degree and 14 years of related work experience in security operations, threat detection, or incident response.
• Any one or more of the following certifications:
  • CISSP (Certified Information Systems Security Professional)
  • CISM (Certified Information Security Manager)
  • CISA (Certified Information Systems Auditor)
  • OSCP (Offensive Security Certified Professional)
  • SANS GIAC certifications, such as:
    • GSE (GIAC Security Expert)
    • GDAT (Defending Advanced Threats)
    • GMON (Continuous Monitoring and Security Operations)
    • GSOC (Security Operations Center)
    • GCED (Enterprise Defender)
    • GIAC GSLC (Security Leadership Certification)
    • GIAC GSTRT (Strategic Planning, Policy, and Leadership)
• Extensive experience in leading security operations teams in large-scale enterprise or government environments.
• Experience in leading security operations automation, cybersecurity exercise orchestration, and continuous monitoring initiatives.
• Experience in managing cyber training platforms, threat detection, and security analytics to improve operational response.
• Strong expertise in risk management, compliance frameworks, or security governance.
• Hands-on experience with security operations, threat intelligence integration, and cyber defense strategies.
• Strong experience in managing multi-million-dollar cybersecurity contracts, leading teams through contract growth, and negotiating cybersecurity-focused engagements.
• Demonstrated ability to engage with executive leadership and communicate complex security concepts.
• Deep understanding of cloud security, identity & access management (IAM), and security automation.
• Experience in budgeting, resource planning, and program execution.
• Must have and maintain an active TS/SCI clearance with eligibility for a polygraph.
• Must be willing to work on-site as needed by the client in the greater Washington, DC area

Due to the nature of our work in the Government and Public Sector, work may be required to be completed at client, EY and/or contractor sites. Our goal is to assign professionals to projects within a commutable distance of their work location office.  In certain circumstances, travel may be required beyond your work location based on client and project needs. Candidates should be willing to travel 20 – 30% or more.

Ideally, you'll also have  

 Prior consulting experience.

• Master’s degree in cybersecurity, information security, or business administration.
• Experience in developing and managing federal cybersecurity programs.
• Knowledge of cyber threat intelligence integration and adversary emulation strategies.
• Strong background in cloud security and zero-trust architectures.
• Experience in cyber risk quantification and security control validation.
• Proven ability to lead cross-functional teams in high-pressure environments..

What we look for 

We’re interested in intellectually curious people with a genuine passion for cybersecurity. With your expertise, we’ll turn to you to speak up with innovative ideas that could make a lasting difference not only to us – but also to the industry. If you have the confidence in both your presentation and technical abilities to grow into a leading expert here, this is the role for you.

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture, and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

What we offer

We offer a competitive compensation package where you’ll be rewarded based on your performance and recognized for the value you bring to our business. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options. Under our flexible vacation policy, you’ll decide how much vacation time you need based on your own personal circumstances. You’ll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.