As an Executive Support Coordinator (ESC), you’ll provide high-level administrative support to the organization. This role involves providing in-office support for local and visiting PPMDDs as well as supplemental in-office assistance. May also assist with tax, backup and interim support for PPMDDs with executive assistants on extended leaves. May also assist and coordinate local office events. The ideal candidate will possess strong organizational skills, attention to detail, and the ability to manage multiple tasks in a dynamic environment. You’ll be a key member of a team using your experience, skills and knowledge of organizational policies, procedures and practices to help achieve the goals of the business. You’ll present information to inform recommendations on business processes and be part of a high performing, diverse and inclusive team sharing best practices.

Your key responsibilities

• Assist in the planning, organization, and execution of local office events, including team meetings, training sessions, and corporate gatherings in compliance with meeting and events policy and process and in collaboration with CBRE as necessary
• Coordinate with Meeting and Events team on logistics such as venue selection, catering, and materials preparation to ensure successful event delivery
• Prepare and organize materials for onsite meetings, presentations, and reports, ensuring all necessary documentation is readily available
• Develop and maintain relationships with internal personnel at all levels to complete support activities
• Manage and coordinate small projects and track progress
• Leverage strong working knowledge of applicable firm and service line quality, risk and confidentiality policies and guidelines in daily business operations
• Apply and share knowledge obtained on firm technology, work processes, resources, structure and business of the firm/service line/functional group
• Use firm knowledge, tools and network of resources to execute on deliverables and solve problems that arise to meet customers’ expectations
• Maintain documents on appropriate file servers and repositories, aid in the adherence to and reinforcement of record retention policies
• Act as a backup for other executive assistants during absences or peak workloads, ensuring continuity of support for executives which may include booking travel arrangements, processing and tracking business expenses in compliance with firm policy
• Collaborate with the executive support team to facilitate smooth operations and effective communication

Skills and attributes for success:

• Highly skilled attention to detail and self-assurance of quality of work performed or reviewed
• Ability to effectively manage conflicting priorities, organize workflow, anticipate customer needs and independently leverage alternative resources to achieve optimal operational excellence
• Proactively coach and share knowledge with colleagues
• Gain knowledge and develop and demonstrate advanced working knowledge of firm structure, service lines, key personnel, software and organizational policies and procedures
• Work independently with minimal supervision

To qualify for the role, you must have

• Ability to provide in-office support five days a week
• 4+ years of relevant business experience or combined no less than 2 years relevant experience and associates or higher degree
• Proficiency in MS Word, Excel, PowerPoint, Teams and Outlook
• Proficiency in automated calendar management tools (e.g. Outlook) and various IOS and Android mobile devices

• Proficiency in MS SharePoint

What we offer you
At EY, we’ll develop you with future-focused skills and equip you with world-class experiences. We’ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn .

• We offer a comprehensive compensation and benefits package where you’ll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job in all geographic locations in the US is $46,900 to $98,000. The base salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is $56,300 to $111,400. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.
• Our expectation is this is 100% in office job.
• Under our flexible vacation policy, you’ll decide how much vacation time you need based on your own personal circumstances. You’ll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.

As an Executive Administrative Coordinator, you will provide high-level, functionally specialized administrative, project and operational support to multiple executives of the firm who hold designated leadership positions. You will be closely aligned and integrated with the operations, strategies and business objectives of senior leaders with visibility across their network. You will proactively identify the needs and challenges of the executive, identifying effective solutions and ensuring that all necessary preparations and support are in place to enable the executive's success. You will track, coordinate and execute on confidential projects, applying judgment and selecting methods for meeting objectives. As a representative of the executive leaders, you will foster sophisticated relationships and interact with internal and external clients and stakeholders.

Your key responsibilities

• Manage daily execution of administrative services for eligible partners, principals, managing directors and directors
• Apply specialized knowledge of service line, sector and operations role of executive to make independent decisions to accomplish project, administrative and operational objectives
• Apply an in-depth understanding of the key drivers affecting the leader’s role and business priorities to administrative and project coordination
• Identify and resolve administrative issues and challenges, analyze problems and implement solutions to improve efficiency and productivity
• Build and foster relationships with internal and external business leaders and stakeholders and their administrative staff to support business objectives
• Protect confidential/proprietary information and manage data and records securely
• Demonstrate high level firm/service line knowledge of QRM policies
• Independently compose, format and edit non-technical business documents in conjunction with leader executives and appropriate internal communications professionals
• Liaise with service line and core business service personnel to track and coordinate executive work/projects; manage information and respond to requests accurately and promptly
• Compile, review and analyze markets and budget reports to create tracking reports, identify action items, coordinate follow up and prepare meeting materials
• Anticipate and apply knowledge of leaders’ priorities to manage complex and constantly changing calendars
• Coordinate domestic/international travel, internal and external events, meetings and conferences within scope leveraging appropriate resources

Skills and attributes for success

• Complex problem solving within realm of role responsibilities, using strong analytical, organizational and research skills
• Independent decision maker exercising discretion/judgment
• Assimilate unfamiliar issues rapidly
• Proactively escalate identified or potential issues
• Ability to communicate effectively and professionally with all levels including senior leaders with sensitivity to matters that require diplomacy
• Navigate organizational structures, changing environments and sensitive relationships
• Prioritize and perform multiple tasks simultaneously
• Advanced skills in MS Word, Excel, PowerPoint, Teams, SharePoint and Outlook
• Work independently

To qualify for the role, you must have

• BA/BS degree or relevant experience
• 8-10 plus years of experience
• Typically, no less than 5 - 7 years relevant experience
• Flexible for overtime as required. Vacation dependent on business needs and cycles.
• Work primarily onsite in the EY office, client or meeting site as determined.
• Must be flexible to travel

Ideally, you’ll also have

• 5+ yrs. exp supporting senior leadership level executives in large organization or firm
• Project coordination experience

Your key responsibilities

• Investigate, coordinate, bring to resolution, and report on security incidents as they are brought up or identified
• Forensically analyze end user systems and servers found to have possible indicators of compromise
• Analysis of artifacts collected during a security incident/forensic analysis
• Identify security incidents through ‘Hunting’ operations within a SIEM, EDR and other relevant tools
• Interface and connect with server owners, system custodians, and IT contacts to pursue security incident response activities, including obtaining access to systems, digital artifact collection, and containment and/or remediation actions
• Provide consultation and assessment on perceived security threats
• Maintain, manage, improve and update security incident process and protocol documentation
• Regularly provide reporting and metrics on case work
• Resolution of security incidents by identifying root cause and solutions
• Analyze findings in investigative matters, and develop fact based reports
• Be on-call to deliver global incident response

Skills and attributes for success

• Resolution of security incidents by identifying root cause and solutions
• Analyze findings in investigative matters, and develop fact-based reports
• Proven integrity and judgment within a professional environment
• Ability to appropriately balance work/personal priorities
• Bachelors or Masters Degree in Computer Science, Information Systems, Engineering or a related field
• 7+ years experience in incident response, computer forensics analysis and/or malware reverse engineering
• Understanding of security threats, vulnerabilities, and incident response
• Understanding of electronic investigation, forensic tools, and methodologies, including: log correlation and analysis, forensically handling electronic data, knowledge of the computer security investigative processes, malware identification and analysis
• Be familiar with legalities surrounding electronic discovery and analysis
• Experience with EDR and SIEM technologies (i.e. Splunk)
• Deep understanding of both Windows and Unix/Linux based operating systems

Ideally, you’ll also have

• Hold or be willing to pursue related professional certifications such as GCFE, GCFA or GREM
• Background in security incident response in Cloud-based environments, such as Azure
• Programming skills in PowerShell, Python and/or C/C++
• Understanding of the best security practices for network architecture and server configuration

What we look for

• Demonstrated integrity in a professional environment
• Ability to work independently
• Have a global mind-set for working with different cultures and backgrounds
• Knowledgeable in business industry standard security incident response process, procedures, and life cycle
• Positive attitude and Excellent teaming skills
• Excellent social, communication, and writing skills
• Good presentation skills
• Excellent investigative, analytical, and problem-solving skills

As a Senior Consultant in Offensive Security within our Service Delivery Center, you will play a pivotal role in enhancing our clients' security posture through proactive threat assessments and vulnerability management. You will lead and collaborate with a team of cybersecurity professionals to implement and manage offensive security initiatives, ensuring that security measures are integrated throughout the software development lifecycle while optimizing service delivery processes.

In this role, you will manage and execute penetration testing, red teaming, and security assessments for our clients. You will work closely with cross-functional teams to identify vulnerabilities, develop mitigation strategies, and ensure that security practices align with industry standards. Your expertise will drive the team’s efforts in automating security processes and help our clients build a more secure working world.

Your Key Responsibilities

• Lead, scope, and execute penetration testing projects, including web applications (including black box, white box, and gray box assessments), networks, cloud environments, hardware, and firmware.
• Develop and execute red team and purple team scenarios to identify gaps in organizational security postures and provide actionable recommendations.
• Perform in-depth penetration testing results create comprehensive reports detailing findings, exploitation procedures, risks, and recommendations.
• Stay current with emerging security threats, vulnerabilities, and industry best practices, and promote continual learning within the team.
• Assist in configuring, handling, patching, and updating penetration testing software an supporting infrastructure to ensure optimal performance and security.
• Contribute to the creation and updating of operational metrics for client meetings, providing insights into tool performance and security findings.

Skills and Attributes for Success

• Proven experience in penetration testing and offensive security practices, with a minimum of 5+ years of related work experience.
• Strong knowledge of automation tools and processes, particularly in the context of offensive security and application security.
• Excellent problem-solving skills and the ability to manage multiple security projects simultaneously.
• Effective communication skills to liaise with clients and internal stakeholders, translating complex technical concepts into understandable terms.

To qualify for the role, you must have

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field.

• A minimum of ten (10) years’ experience performing penetration tests; or a minimum of five (5) years working in an electric utility in generation, or transmission & distribution performing penetration tests
• Extensive experience with manual attack and penetration testing, including web applications, networks, and cloud environments.
• Proficiency in scripting languages (e.g., Python, Bash, PowerShell) for automation of security tasks.
• Knowledge of Windows, Linux, Unix, and other major operating systems.

Ideally, you’d also have

• Certifications such as CCSP, CSSLP, OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN, CISSP, CISM, etc.

• Contributions to the security community, including research, public CVE disclosures, bug bounty acknowledgments, and open-source project involvement.
• Strong analytical skills with the ability to interpret complex information and communicate it effectively.
• Active interest in staying updated on the latest cybersecurity threats and trends, promoting continual learning and adaptation.

What We Offer

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.

• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.

• Transformative leadership: We’ll give you the insights, coaching and confidence to succeed in high performing teams.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

In a rapidly changing IT environment, clients from all industries look to us for trusted solutions for their increasingly complex risks and vulnerabilities. As a part of our digital identity (DI) and privileged access management (PAM) teams you’ll be right at the heart of that goal, helping clients gain insight and context to their complex PAM environments and assessing, improving, and building infrastructure, processes and policies in order to meet the client’s current and next generation PAM needs. You’ll get to use your technical and business skills in order to help us drive this mission and have an impact on cyber security at a global level.

You’ll work alongside respected industry professionals, learning about and using the latest tools and techniques to identify and overcome some of the most relevant and pressing security issues in the world.

Your key responsibilities

Within the privileged access management team, you’ll work in the following areas:

• Current state privileged access management assessments
• Capability maturity and benchmarking assessments
• Developing PAM strategy and road maps
• Target operating model and governance
• PAM policies, procedures, and standards
• Vendor analysis and assessments

• Design and architecture for PAM transformation.
• PAM Process and policies design and re-engineering
• Implementation, expansion, and integrations
• PAM solution migrations
• Discovery, remediation and onboarding of privileged accounts and secrets
• Operation process automation

Skills and attributes for success

• Effectively lead and motivate client engagement teams and provide technical leadership in the assessment, design, and implementation of security and IT risk solutions
• Foster an innovative and inclusive team-oriented work environment. Play an active role in counselling and mentoring junior consultants within the firm
• Consistently deliver quality client services. Drive high-quality work products within expected timeframes and on budget. Monitor progress, manage risk and ensure key stakeholders are kept informed about progress and expected outcomes and assist with business development opportunities.
• Use knowledge of the current IT environment and industry trends to identify engagement and client service issues, and communicate this information to the engagement team and client management through written correspondence and verbal presentations. Stay abreast of current business and industry trends relevant to the client's business.

To qualify for the role, you must have.

• A bachelor's degree in a related field and approximately 5 years of related work experience; or a graduate degree and approximately 4 years of related work experience
• Experience in one or more of the following:
  • Privileged access management solutions including design or implementation of PAM technologies (such as CyberArk, BeyondTrust, Delinea, HashiCorp);
  • Role-based access control including design and development of user access roles.
  • Experience in secret management solutions including understanding of DevOps (Ansible, Jenkins, Gitlab, Kubernetes, terraforms) and cloud (Azure, AWS and GCP) solutions sets.
  • Ability in Windows, Linux, and Unix operating systems
  • Exposure to the IGA solutions (SailPoint or Saviynt)
  • Exposure to the scripting and programming languages (PowerShell, Java, C#) and Microsoft office (word and PowerPoint, Visio)
• An understanding of access control concepts including directory services, SAML, LDAP, PKI
• Experience in process definition, workflow design, and process mapping.
• A valid driver's license in the US and a valid passport required; willingness and ability to travel internationally and a willingness to travel; travel is estimated at 40-60%

Ideally, you’d also have

• Strong presentation and communication skills and ability to speak with director and VP levels.
• CISSP, CISM, CISA, CIPT, CIPM, CRISC or other relevant certification desired; non-certified hires are required to become certified within 1 year from the date of hire.
• CyberArk, BeyondTrust, Delinea, HashiCorp, vendor certifications are desired.

Your key responsibilities

• Investigate, coordinate, bring to resolution, and report on security incidents as they are brought up or identified
• Forensically analyze end user systems and servers found to have possible indicators of compromise
• Analysis of artifacts collected during a security incident/forensic analysis
• Identify security incidents through ‘Hunting’ operations within a SIEM and other relevant tools
• Interface and connect with server owners, system custodians, and IT contacts to pursue security incident response activities, including: obtaining access to systems, digital artifact collection, and containment and/or remediation actions
• Provide consultation and assessment on perceived security threats
• Maintain, manage, improve and update security incident process and protocol documentation
• Regularly provide reporting and metrics on case work
• Resolution of security incidents by identifying root cause and solutions
• Analyze findings in investigative matters, and develop fact based reports
• Be on-call to deliver global incident response

Skills and attributes for success

• Resolution of security incidents by identifying root cause and solutions
• Analyze findings in investigative matters, and develop fact-based reports
• Proven integrity and judgment within a professional environment
• Ability to appropriately balance work/personal priorities

To qualify for the role you must have

• Bachelors or Masters Degree in Computer Science, Information Systems, Engineering or a related field
• 5+ years experience in incident response, computer forensics analysis and/or malware reverse engineering;
• Understanding of security threats, vulnerabilities, and incident response;
• Understanding of electronic investigation, forensic tools, and methodologies, including: log correlation and analysis, forensically handling electronic data, knowledge of the computer security investigative processes, malware identification and analysis;
• Be familiar with legalities surrounding electronic discovery and analysis;
• Experience with SIEM technologies (i.e. Splunk);
• Deep understanding of both Windows and Unix/Linux based operating systems;

Ideally, you’ll also have

• Hold or be willing to pursue related professional certifications such as GCFE, GCFA or GCIH
• Background in security incident response in Cloud-based environments, such as Azure
• Programming skills in PowerShell, Python and/or C/C++
• Understanding of the best security practices for network architecture and server configuration

What we look for

• Demonstrated integrity in a professional environment
• Ability to work independently
• Have a global mind-set for working with different cultures and backgrounds
• Knowledgeable in business industry standard security incident response process, procedures, and life cycle
• Excellent teaming skills
• Excellent social, communication, and writing skills