Security Consultant - EY Global Delivery Services

Job summary

As a Security Consultant within EY’s internal Security Consulting and Assurance team, the individual will be a trusted advisor to EY’s Audit Technologies portfolio. Overarching responsibilities will include : direct engagement in delivery on programs and projects, defining security architectures, providing security guidance, identifying and prioritizing security-related requirements, promoting secure-by-default designs and facilitating delivery of information security services throughout the system development life cycle (SDLC). The role will also direct technology teams in the implementation of appropriate risk treatment and mitigation options to address security vulnerabilities. Security Consultants are responsible for the translation of vulnerabilities into business risk terminology for communication to business stake holders.

Essential functions of the job

• Define security architectures and provide pragmatic security guidance that balance business benefit and risks.
• Engage technology teams in order to evaluate and prescribe security controls at all touchpoints throughout the technology architecture
• Define security configuration standards for platforms and technologies
• Provide knowledge sharing and technical assistance to other team members
• Act as Subject Matter Expert (SME) in responsible technologies and have deep technical understanding of responsible portfolios
• Perform risk assessments of information systems and infrastructure
• Maintain and enhance the Information Security risk assessment methodology
• Develop appropriate risk treatment and mitigation options to address security risks identified during security review or audit
• Translate technical vulnerabilities into business risk terminology for business units and recommend corrective actions to customers and project stake-holders

Knowledge and skills requirements

Job Requirements Education

An advanced degree in Computer Science or a related discipline, or equivalent work experience

Required Experience

Desired Experience

Certification requirements

Candidates are preferred to hold or be actively pursuing related professional certifications within the GIAC family of certifications or CISSP, CISM or CISA

#J-18808-Ljbffr