EYP-IDD-Manager

The opportunity

We are looking for an experienced Privileged Access Management (PAM) professional to join our Strategy & Execution team as a Manager. The role requires strong architecture and delivery experience across enterprise PAM, including privileged-account discovery and onboarding, secure vault design and implementation, credential rotation, session management, secrets management, endpoint privilege management, remote privileged access and operational governance across IT and OT environments. The successful candidate will bring an enterprise-wide, platform-agnostic perspective and practical experience with leading PAM technologies.

Your key responsibilities

• Play a key role in our Transaction Strategy and Execution team, supporting global EY teams to shape, sell and deliver cybersecurity, IAM and PAM engagements.
• Lead client discussions, translate business and transaction needs into practical solutions, and provide clear advice to senior executives, deal teams and technology leaders.
• Lead enterprise PAM strategy, architecture and transformation work across privileged-account discovery and onboarding, vaulting, credential rotation, session controls, secrets management, endpoint privilege management, remote access and governance across IT and OT environments.
• Define Zero Trust-aligned target architectures, high-level designs, integration and control patterns, resilient platform topologies, onboarding standards and transition roadmaps for human and non-human privileged identities across hybrid and multicloud environments.
• Architect and guide implementations of leading PAM platforms such as CyberArk, BeyondTrust or Delinea, including vaults, password and session management, just-in-time access, secrets management, integrations, high availability and disaster recovery.
• Assess complex PAM environments, identify material risks and technical debt, and recommend pragmatic remediation across privileged users, service and application accounts, cloud roles, DevOps and machine secrets, vendor access and break-glass processes.
• Lead or support buy-side and sell-side cyber due diligence, evaluating IAM and PAM maturity, privileged-access exposures, platform and operational risks, regulatory considerations, deal dependencies, costs and value-creation opportunities.
• Support post-deal cyber and IAM integration, carve-out and separation, including Day 1 planning, user and privileged-account migration, access continuity, PAM platform transition and target-state architecture.
• Define PAM operating models and governance, including ownership, risk-tiering, onboarding, access approvals, credential rotation, session review, emergency access, exceptions, control monitoring, service management and reporting.
• Provide architecture assurance for PAM and wider IAM programs by reviewing designs, integrations, migration approaches, controls and operational readiness, and helping resolve material risks and exceptions.
• Manage engagement scope, teams, quality, timelines, risks and economics while coaching team members and maintaining a high standard of client service.
• Contribute to proposals, market pursuits, thought leadership, new services and reusable methods that strengthen the Strategy & Execution cybersecurity practice.

Skills and attributes for success

• Executive presence and confidence engaging C-level, board, investment and technology stakeholders.
• Structured problem-solving and hypothesis-led thinking, with an investor mindset and focus on value, risk and execution.
• Ability to lead PAM discovery and design workshops, complex architecture reviews and design authorities, reconcile IT and OT security, operational, control and delivery priorities, and build stakeholder alignment across security, infrastructure, cloud, application, DevOps and operations teams.
• Lead meetings with senior client stakeholders to advise, shape and drive the strategy and planning for pre-deal diligence, integration, carve-out / separation and operational restructuring.
• Contribute to our practice development initiatives, supporting the continued focus on our team as a great place to work.
• Have innovative mindset to think out of the box for development of new services as per client needs
• Act as a role model and support development of junior team members, coupled with the recruitment and training responsibilities.
• Be flexible to support broader cyber diligence, post-deal integration and separation, and cybersecurity transformation work.
• Willingness to undertake international travel as per business requirement

To qualify for the role, you must have

• 8–10 years of relevant experience with B.Tech. / B.E. in Computer Science, Information Technology, Electronics, Cybersecurity or a related discipline; an MBA or equivalent postgraduate qualification from Tier 1/Tier2 institutes is preferred.
• Relevant security, architecture or PAM certifications are advantageous.
• Strong experience defining enterprise PAM strategies, operating models, architecture standards, roadmaps and Zero Trust-aligned transformation plans across IT, cloud and OT environments.
• Strong architecture and delivery experience with at least one leading PAM platform, preferably CyberArk, BeyondTrust or Delinea, including vaulting, credential and session controls, just-in-time access, secrets management, resilience and key enterprise integrations.
• Proven experience leading PAM implementation, migration or transformation workstreams, from discovery and onboarding through testing, cutover, decommissioning and operational handover.
• Strong knowledge of privileged-access controls for human and non-human accounts, including least privilege, credential rotation, session monitoring, emergency access, segregation of duties and audit logging.

Ideally, you’ll also have

• Broader experience across CyberArk, BeyondTrust, Delinea, Microsoft Entra Privileged Identity Management, cloud-native secrets stores and DevOps secrets-management technologies, together with exposure to PAM use cases in industrial control and OT environments, is an added advantage.
• Strong communication and presentation skills with proven experience of producing high-quality reports, papers, presentations and thought leadership
• Program and project management expertise with demonstrable experience managing successful enterprise IAM or cybersecurity transformation programs.
• Practical exposure to relevant security and identity standards and frameworks such as NIST CSF, NIST SP 800-207, ISO 27001, CIS Controls and applicable IAM control requirements.

What we offer

EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across six locations – Argentina, China, India, the Philippines, Poland and the UK – and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. We’ll introduce you to an ever-expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility