IS Senior Security Consultant
EY
EY
EY seeks a Senior Security Consultant to join the Global Information Security team. This role serves as a trusted security advisor for the Client Technology Platforms Delivery organization, contributing to the end-to-end delivery of technology programs and projects. You will collaborate with architects, engineers, and product managers, defining security risks, providing guidance, and ensuring secure-by-default designs throughout the System Development Life Cycle (SDLC).
EY is a global leader in professional services, committed to building a better working world through data and technology. We empower our teams to innovate and deliver exceptional value to clients and society.
Key responsibilities include providing security architectures and pragmatic guidance, engaging with IT project teams across the SDLC, performing threat modeling and risk assessments, and defining security configuration standards for platforms. You will translate technical vulnerabilities into business risks, recommend corrective actions, and share knowledge. The role also requires acting as a Subject Matter Expert (SME) in responsible technologies, possessing a deep technical understanding of service and technology portfolios.
Candidates should possess significant working security experience in areas such as Cloud Security (Azure, GCP, AWS), Infrastructure Security (IAM, WAF, API Gateways), Application Security (access management, data tenancy), and Identity and Access Management (Azure AD). Experience with Agile & DevSecOps methodologies is essential. An advanced degree in Computer Science or equivalent work experience is required, along with five or more years in Information Security risk management. Proficiency in communicating security findings to various stakeholders is also necessary.
EY Global Delivery Services ( EY GDS)
Management Consulting