Join EY's Digital Risk Consulting Team as a Senior Consultant specializing in Cloud Security and Risk Assessment. This role offers a unique opportunity to lead the audit and review of security architecture and controls within hybrid cloud environments, contributing significantly to our growing service offerings. Become part of a leading firm and shape your future with confidence, helping to build a better working world.

Evaluate critical cloud security solutions including CSPM, CWPP, IAM, CASB, WAF, encryption services, SIEM, and automation tools for hybrid cloud environments (AWS, Azure, GCP, on-premises). Assess the effectiveness of vulnerability management and patching programs, ensuring timely remediation. Review security hardening standards and secure cloud configuration best practices. Conduct assessments of AWS, Azure, and GCP against industry standards and best practices. Design and review cloud security architectures, landing zones, network segmentation, and identity management controls. Perform technical security configuration reviews across cloud infrastructure, platforms, containers, and serverless services. Utilize CSPM and CNAPP solutions for security posture assessment. Conduct cloud security audits, risk and compliance reviews, and third-party assessments. Develop actionable recommendations and roadmap strategies for cloud security improvements. Evaluate DevSecOps implementation and cloud security monitoring practices. Conduct risk assessments and propose mitigation strategies. Support broader Internal Audit and Cyber security engagements. Develop cloud security policies and procedures. Communicate cloud security risks and remediation plans effectively to both technical teams and senior management.

Required skills include strong technical knowledge of AWS, Azure, GCP, OCI, and on-premises security architectures and controls, with proven ability to evaluate cloud security technologies, policies, and processes. Experience in conducting cloud risk assessments against global/MENA specific standards and regulations is essential, alongside experience managing cloud security metrics, reporting, and audit readiness. Excellent communication and stakeholder management skills are crucial, as is experience in incident management and response within cloud environments. Familiarity with DevSecOps and secure CI/CD practices in the cloud is also necessary.

To qualify, candidates need 5–8 years of experience in cloud security, with hands-on expertise in hybrid and multi-cloud environments. A solid understanding of CIS Benchmarks, NIST, ISO 27001, CSA CCM, and cloud security best practices is expected. Prior experience leading client workshops, assessments, cloud security strategy engagements, and preparing executive-level reports and recommendations is highly valued. The role requires openness to travel within the MENA region (up to 50% of the time).

Ideally, candidates will possess a bachelor's or master's degree in B.TECH/B.E, MS in computer science, MBA (IT or Systems), or a related discipline. Relevant certifications such as CCSP, CCSK, AZ-500, AWS Security Specialty, Google Professional Cloud Security Engineer, CISSP, or CISM are preferred.