Cyber - AI Security - Senior - Consulting

Artificial Intelligence (AI) is rapidly transforming how organizations operate, and with that transformation comes an entirely new frontier of security, governance, and risk management challenges. Organizations are grappling with securing AI pipelines, managing model-level risks, operationalizing AI governance programs, and navigating an evolving regulatory landscape specific to AI technologies. As a Senior Consultant within EY’s Cyber practice focused on AI Security, you will work with clients to assess AI risk postures, architect AI security controls, and develop governance frameworks that enable organizations to adopt and scale AI responsibly and securely. This role offers the opportunity to combine hands-on technical implementation work with strategic advisory and architecture engagements across diverse industries., As a Senior Consultant in AI Security, you will play an active and technically engaged role in delivering AI security, AI Security Posture Management (AI-SPM), and AI governance engagements while collaborating closely with clients and EY engagement teams. You will conduct AI security assessments, evaluate AI/ML pipelines and model infrastructure, identify vulnerabilities inherent to AI systems, and develop practical, prioritized remediation strategies. You will architect and support the implementation of AI-SPM solutions, configure AI security tooling-including platforms and harnesses-and help clients operationalize continuous monitoring and governance controls across their AI workloads., In addition, as a Senior Consultant, you will develop AI governance frameworks, policies, and standards aligned to emerging regulatory requirements and industry guidance. You will assist clients in designing AI risk management programs, performing AI model risk assessments, and building AI security roadmaps that balance innovation with responsible AI principles. You will prepare client deliverables, technical architecture documentation, and executive-level presentations that communicate complex AI security concepts to both technical and non-technical audiences. You will collaborate with multidisciplinary teams to deliver high-quality work products, support project planning and management activities, mentor junior team members, and contribute to business development initiatives, thought leadership, and practice-building efforts within EY’s growing AI security capability.

• Strong understanding of AI/ML systems, architectures, and deployment patterns, including large language models (LLMs), generative AI, and MLOps pipelines.
• Hands-on experience with AI Security Posture Management (AI-SPM) tools, platforms, and methodologies.
• Ability to identify and assess security risks specific to AI systems, including prompt injection, model poisoning, data exfiltration, supply chain vulnerabilities, and adversarial attacks.
• Experience configuring and operationalizing AI security and DevSecOps tooling, including platforms and harnesses, to enforce security controls within AI development and deployment pipelines.
• Knowledge of AI governance frameworks, responsible AI principles, and emerging AI-specific regulatory requirements.
• Strong critical thinking, analytical, and problem-solving skills applied to complex AI security and risk challenges.
• Ability to communicate technical AI security concepts effectively to both engineering teams and executive stakeholders.
• Experience developing technical architecture documentation, executive presentations, and client-facing deliverables.
• Strong verbal and written communication skills.
• Ability to manage competing priorities in a fast-paced consulting environment.
• Strong attention to detail and commitment to high-quality client service.
• Ability to build relationships and collaborate effectively across multidisciplinary teams and client organizations.
• Demonstrated initiative, adaptability, and a commitment to staying current with the rapidly evolving AI security landscape.

To Qualify for the Role, You Must Have

• A bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, and approximately 3-5 years of relevant experience, including at least 1-2 years in AI or machine learning security; or a graduate degree and 2-4 years of relevant experience.
• Experience in one or more of the following areas:
• AI security assessments, AI-SPM, or AI model risk evaluations
• AI/ML pipeline security, model security, and MLOps security practices
• AI governance, responsible AI policy development, and AI risk management frameworks
• DevSecOps and CI/CD security, including hands-on experience with platforms and harnesses
• Cloud security with specific experience securing AI workloads on platforms such as AWS, Azure, or GCP
• AI regulatory compliance and emerging AI-specific standards and guidance
• Cybersecurity architecture, risk management, and security controls design
• Familiarity with AI security frameworks and guidance, including NIST AI RMF, OWASP Top 10 for LLMs, and MITRE ATLAS.
• Working knowledge of foundational cybersecurity frameworks-including NIST CSF, NIST 800-53, and ISO 27001/27002-as applied within AI-enabled environments.
• Strong Microsoft PowerPoint, Excel, and Word skills.
• Willingness to travel based on client and business needs; travel estimated at 25-50%.

Ideally, You’ll Also Have

• Professional certifications in cybersecurity (e.g., CISSP, CCSP, CISM) or emerging AI/ML security credentials.
• Hands-on experience with AI-SPM platforms, MLOps tooling, and AI security automation technologies.
• Experience with CI/CD orchestration and integrated security tooling, including harnesses, to enforce automated security gates within AI development pipelines.
• Knowledge of adversarial machine learning techniques, model explainability requirements, and AI supply chain risk management.
• Exposure to AI-related regulatory developments, including the EU AI Act, NIST AI RMF, and sector-specific AI guidance applicable to financial services, healthcare, or critical infrastructure.
• Experience facilitating client workshops, technical design sessions, and AI security architecture reviews.
• Background in software development, data engineering, or ML engineering that informs deep technical AI security expertise.
• Experience within a consulting, professional services, or advisory environment.

What We Look For

We are seeking professionals who are deeply curious about the intersection of artificial intelligence and cybersecurity, with the hands-on technical capabilities to assess and architect secure AI systems alongside the advisory acumen to guide organizational AI governance strategies. Successful candidates combine technical depth in AI security with strong business judgment and can engage confidently with both engineering teams and executive stakeholders. The ideal candidate is motivated by the challenge of securing transformative and rapidly evolving technologies, committed to delivering exceptional client outcomes, and eager to help shape and grow EY’s Cyber practice.

• New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices - $125,800 to $209,700
• Bay Area California offices - $131,100 to $218,500
• All other offices locations in the US, including Sacramento - $104,800 to $192,200
• Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world., * At EY, our values set the foundation for how we work and the behaviors we expect of our people. Any misrepresentation or falsification of information or lack of integrity at any point in the recruiting process may result in withdrawal of your candidacy, revocation of an offer or immediate termination of employment.

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.