Security Consultant EY Global Delivery Services

Security Consultant

EY Technology Overview

Technology is central to EYs operations and service delivery. With 250000 professionals across 140 countries secure and efficient technology enables our people to work seamlesslywhether on laptops mobile devices or through internal and client-facing solutions. Technology drives innovation and underpins the services we provide.

EY Technology is organized into three business units:

• Client Technology (CT):Develops innovative technology services for clients accelerating opportunity identification and delivery.
• Enterprise Workplace Technology (EWT):Supports core business services with cost-effective user-centric technology infrastructure.
• Information Security (Info Sec):Protects EY and client data by preventing detecting and mitigating cyber risks.

The Opportunity

As a Security Consultant within EYs Client Service Security Consulting and Assurance team you will be a trusted advisor to EYs Strategy & Transactions and Sustainability service line. You will support global platforms AI and analytics solutions and line-of-business services. Your role includes reviewing security architectures providing security guidance prioritizing security requirements promoting secure-by-design principles and facilitating security throughout the system development life cycle (SDLC). You will also provide guidance in risk treatment and translate technical vulnerabilities into business risk language for stakeholders.

Key Responsibilities

• Define pragmatic security architectures balancing business benefits and risks.
• Collaborate with IT project teams throughout the SDLC to identify and implement security controls.
• Conduct risk assessments of information systems and infrastructure.
• Maintain and enhance the Information Security risk assessment methodology.
• Develop security configuration standards for platforms and technologies.
• Recommend risk treatment and mitigation strategies for identified security risks.
• Translate technical vulnerabilities into business risk terms and advise stakeholders on corrective actions.
• Share knowledge and provide technical support to team members.
• Serve as a Subject Matter Expert (SME) in assigned technologies with deep technical expertise.

Skills and Attributes for Success

• Strategic mindset to develop long-term risk management and security frameworks.
• Ability to balance security needs with business impact and benefits.
• Skilled in facilitating compromise to advance security objectives incrementally.
• Strong understanding of EYs business objectives and ability to build cross-functional relationships.
• Collaborative team player who promotes security policy compliance.
• Experienced in leading meetings with diverse stakeholders building consensus and mediating compromises.
• Comfortable working in ambiguous and dynamic environments.
• Minimum five years experience in architecture design and engineering of web-based multi-tier systems or network infrastructures.
• Experience with security architecture and assessment of messaging ERP CRM or data analytics solutions.
• Proficient in conducting risk vulnerability vendor and third-party assessments with remediation recommendations.
• Familiarity with security standards such as ISO 27001/27002 NIST PCI DSS ITIL COBIT.
• Experience with cloud technologies and solutions preferably Microsoft Azure.

Qualifications

• Advanced degree in Computer Science or related field or equivalent experience.
• At least five years managing significant Information Security risk functions.
• Eight or more years in Information Security or IT roles.
• Proven ability to communicate security findings and recommendations effectively to IT teams and management.
• Exceptional judgment tact and decision-making skills.
• Adaptable to shifting priorities ambiguity and rapid change.
• Strong management interpersonal communication organizational and decision-making skills.
• Minimum two years experience with cloud architecture design and assessment.
• Proficient in English.

Preferred Certifications

• GIAC certifications CSSP CISSP CISM or CISA are highly desirable or candidates actively pursuing these certifications.

What EY Offers

We provide a competitive remuneration package rewarding individual and team performance. Our Total Rewards include flexible working support career development opportunities and benefits tailored to your needs through FlexEY covering holidays health insurance savings and discounts.

Additional benefits:

• Support coaching and feedback from engaging colleagues.
• Opportunities to develop new skills and advance your career.
• Flexibility to manage your role in a way that suits you.

EY is committed to inclusivity and flexible working arrangements to help you balance professional and personal priorities. While client-facing roles may require travel and onsite presence flexible options support a healthy work-life balance.

About EY

EY is a global leader in assurance tax transaction and advisory services committed to building a better working world. We foster a culture of training opportunity and creative freedom. Joining EY means a lifelong exceptional experience supported by a passionate team dedicated to making EY the best employer.

If you meet the above criteria please contact us promptly to explore this opportunity.

Required Experience:

Contract

Employment Type : Contract
Experience: years
Vacancy: 1