At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.
Senior Security Consulting
The opportunity
As a Security Consultant within EY’s internal Global Information Security team, the individual will be a trusted security advisor to the Client Technology Platforms Delivery organization within IT Services. The role will directly engage in supporting a team of architects, engineers, and product managers for delivery on programs and projects, defining security risks and controls, providing security guidance, identifying and prioritizing security-related requirements, promoting secure-by-default designs and facilitating delivery of information security services throughout the system development life cycle (SDLC).
Your key responsibilities
- Support a technical team with a focus on the following responsibilities:
- Define security architectures and provide pragmatic security guidance that balance business benefit and risks.
- Engage IT project teams throughout the SDLC to identify and prioritize applicable security controls and provide guidance on how to implement these controls.
- Perform threat modeling and risk assessments of information systems, applications and infrastructure.
- Maintain and enhance the Information Security risk assessment and certification methodologies.
- Define security configuration standards for shared and multi-tenant platforms and technologies.
- Develop appropriate risk treatment and mitigation options to address security risks identified during security review or audit.
- Translate technical vulnerabilities into business risk terminology for business units and recommend corrective actions to customers and project stakeholders.
- Provide knowledge sharing and technical assistance to other team members.
- Act as Subject Matter Expert (SME) in responsible technologies and have deep technical understanding of responsible services and technology portfolios.
Skills and attributes for success
Significant working security experience and knowledge in the design, implementation, and operation of security controls in the following areas:
- Identity and Access Management – Experience with Azure Active Directory (AAD) based Identity and Access Management and Authorization design and integration with API, IDaaS, and Federation technologies.
- Cloud Security – Technical understanding of virtualization, cloud infrastructure, and public cloud offerings and experience designing security configuration and controls within cloud-based solutions e.g., Microsoft Azure and Azure PAAS services or another cloud platform (GCP, AWS, IBM, AliCloud, etc.).
- Infrastructure Security – Experience with the integration of cloud native infrastructure security technologies and solutions into business solution architectures.
- Application Security - Experience with the design and testing of security controls for multi-tier business solutions.
- Strong leadership and organizational skills.
- Ability to appropriately balance firm security needs with business impact & benefit.
- Ability to facilitate compromise to incrementally advance security strategy and objectives.
- Ability to team well with others to facilitate and enhance the understanding & compliance to security policies.
To qualify for the role, you must have:
- Advanced degree in Computer Science or a related discipline; or equivalent work experience.
- Five or more years of experience in the management of a significant Information Security risk management function.
What working at EY offers
We offer a competitive remuneration package where you’ll be rewarded for your individual and team performance.
#J-18808-Ljbffr
