[Hiring] Senior Security Consultant @EY

Role Description

As a Security Consultant within EY’s internal Global Information Security team, the individual will be a trusted security advisor to the Client Technology Platforms Delivery organization within IT Services. The Client Technology Platforms delivery organization is responsible for end-to-end delivery of technology programs and projects supporting EY’s Client Technology service lines.

• Support a technical team with a focus on the following responsibilities:
• Provide security architectures and pragmatic security guidance that balance business benefit and risks.
• Engage IT project teams throughout the SDLC to identify and prioritize applicable security controls and provide guidance on implementation.
• Perform threat modeling and risk assessments of information systems, applications, and infrastructure.
• Maintain and enhance the Information Security risk assessment and certification methodologies.
• Define security configuration standards for shared and multi-tenant platforms and technologies.
• Develop appropriate risk treatment and mitigation options to address security risks identified during security review or audit.
• Translate technical vulnerabilities into business risk terminology for business units and recommend corrective actions to customers and project stakeholders.
• Provide knowledge sharing and technical assistance to other team members.
• Act as Subject Matter Expert (SME) in responsible technologies and have deep technical understanding of responsible services and technology portfolios.

Qualifications

• Significant working security experience and knowledge in the design, implementation, and operation of security controls in one of the following areas:
• Cloud Security
• Infrastructure Security
• Application Security
• Identity and Access Management
• Agile & DevSecOps Methodologies
• Although not required, it is preferred that candidates possess additional working security experience and knowledge in one or more of the following areas:
• Operational Security
• Information Security Standards
• Product Management

Requirements

• Advanced degree in Computer Science or a related discipline; or equivalent work experience.
• Preferred to hold or be actively pursuing related professional certifications within the GIAC family of certifications or CISSP, CISM or CISA or similar cloud-security oriented certifications.
• Five or more years of experience in the management of a significant Information Security risk management function.
• Experience in managing the communication of security findings and recommendations to IT project teams, business leadership, and technology management executives.

Benefits

• Competitive remuneration package where you’ll be rewarded for your individual and team performance.
• Comprehensive Total Rewards package includes support for flexible working and career development.
• FlexEY allows you to select benefits that suit your needs, covering holidays, health and well-being, insurance, savings, and a wide range of discounts, offers, and promotions.
• Support, coaching, and feedback from engaging colleagues.
• Opportunities to develop new skills and progress your career.
• Freedom and flexibility to handle your role in a way that’s right for you.