Government and Public Sector - Service Delivery Center - Cybersecurity Risk Senior Analyst

Government and Public Sector - Service Delivery Center - Cybersecurity Risk Senior Analyst Location: San Antonio Other locations: Primary Location Only Date: Apr 15, 2026 Requisition ID: 1701931 At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. Government & Public Sector – Service Delivery Center - Cybersecurity - Strategy, Risk, Compliance & Resiliency Senior Analyst From strategy to execution, the Government & Public Sector practice of Ernst& Young provides a full range of consulting and audit services to help our Federal, State, Local and Education clients implement new ideas to achieve their mission outcomes. The Opportunity The Service Delivery Center is made up of high-performing, US-based resources who work closely with our experienced professionals to deliver project-based work and managed services to our federal clients. This role is part of our Cybersecurity – Strategy, Risk, Compliance & Resiliency (“SRC&R”) team. The team assists our clients with aligning a security management strategy with their business goals by assessing, designing, training, implementing and operating cybersecurity processes and solutions. Your Key Responsibilities Design and assess security architecture for technologies such as SaaS, PaaS, laaS, AI/ML, and Zero Trust Architecture (ZTA) Develop and implement application and cloud security architectures, primarily in AWS as well as Azure and Oracle Ensure compliance with cybersecurity frameworks including NIST 800-53, NIST 800-171, OWASP, CIS, STIG, SOX, CMMC and DFAR requirements Conduct network security assessments, focusing on ZTA, secure connectivity (Firewall Ingress/Egress), and data encryption, and key management Manage workload independently and proactively. Collaborate directly with Product Owners to explain technical architecture requirements and address related questions Effectively lead and motivate the Service Delivery Center team supporting technology consulting engagements and lead SRC&R service operations and delivery Provide guidance and direction to on-site GPS SRC&R consultants in identifying process improvements, including junior staff members, enhancing existing SRC&R solutions, and operating SRC&R processes as required Additional responsibilities include support in the following areas: Assess cybersecurity controls, programs and strategies using proprietary and industry frameworks Operate SRC&R solutions based on engagement-defined policies and procedures Develop and operate cybersecurity measurements and monitoring Develop cybersecurity strategy and roadmap Deploy and govern NIST Risk Management Framework and Assessment & Authorization Manage cybersecurity-focused Supply Chain Risk Management and/or Third-Party Risk management operations, assessment and enablement Design and re-engineer cybersecurity processes Drive high-quality work products within expected timeframes. Monitor progress and manage risk while keeping stakeholders informed of progress and expected outcomes Use knowledge of industry trends to identify engagement and client service issues and communicate this information to the on-site engagement team through written correspondence and verbal presentations. Stay informed of current Cybersecurity industry trends relevant to the services being delivered. Skills and attributes for Success Working knowledge of security frameworks and standards such as ISO 27001/2, PCI DSS, NIST 800-53, NIST CSF, and cybersecurity laws and regulations such as FISMA Ability to produce high-quality work products within expected timeframes To qualify for the role you must have Bachelor’s degree in a related field A minimum of 3 years of related work experience Must be able to obtain and maintain a Secret-level clearance or higher Must be comfortable working in person as needed Experience in one or more of the following areas: Cybersecurity assessments IT and cybersecurity policies, standards, procedures and controls Cybersecurity strategies and roadmaps Cybersecurity awareness and training Cybersecurity metrics and reporting Cybersecurity organization design and implementation Cybersecurity and risk management solution design and implementation (e.g., SNOW IRM, Archer GRC, RiskLens, Azure Security Center, etc.) Federal RMF solution operations (e.g., eMass CSAM, Xacta, etc.) Cybersecurity and IT architecture experience (e.g., cloud security architect, security architect) Flexibility to travel up to 20% Ideally, you’ll also have CISSP, CISM, CISA, CIPT, CIPM, CIPP, CRISC or other relevant certification Prior experience in a service delivery center or similar environment What we look for We are looking for people who strive to lead themselves, their teams, and their communities, people who foster effective teamwork to drive results and who communicate authentically with EY colleagues across various teams. What we offer you At EY, we’ll develop you with future-focused skills and equip you with world-class experiences. We’ll empower you in a flexible environment and fuel your extraordinary talents in a diverse and inclusive culture. Comprehensive compensation and benefits package with a base salary range of $77,500 to $140,900 in the US (higher ranges for major metro areas). Includes medical and dental coverage, pension and 401(k) plans, wide range of paid time off options. Hybrid model: most people in external, client-serving roles work in person 40–60% of the time over an engagement. Flexible vacation policy: you can decide how much vacation time you need based on personal circumstances. Time off granted for paid holidays, winter/summer breaks, personal/family care, and other leaves. Equal Employment Opportunity Statement EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law. Accessibility Statement EY is committed to providing reasonable accommodation to qualified individuals with disabilities. If you have a disability and need assistance applying online or during the application process, please call 1-800-EY-HELP3 and request accommodation support. #J-18808-Ljbffr Ernst & Young Advisory Services Sdn Bhd