Join EY as a Senior Security Consultant and build a career that is as unique as you are. You'll leverage your expertise within the global Information Security team, serving as a trusted advisor to the Client Technology Platforms Delivery organization. This role is integral to delivering technology programs and projects, focusing on security architecture, risk management, and secure-by-design principles throughout the system development lifecycle.

EY Technology is at the core of our operations, ensuring that our 250,000 employees across 140 countries have secure and reliable technology to perform their roles. Our Information Security division is dedicated to preventing, detecting, responding to, and mitigating cyber risks, safeguarding EY and client data.

As a Security Consultant, you will support a technical team by providing pragmatic security guidance and architectures that balance business benefits with associated risks. You will actively engage with IT project teams throughout the SDLC, identifying and prioritizing security controls and advising on their implementation. Key responsibilities include performing threat modeling and risk assessments for information systems, applications, and infrastructure, as well as defining security configuration standards for shared platforms. You'll translate technical vulnerabilities into business risk terminology for stakeholders and recommend corrective actions, while also serving as a Subject Matter Expert in your responsible technologies.

To excel in this role, you should possess significant working security experience in designing, implementing, and operating security controls within areas such as Cloud Security (Azure, GCP, AWS), Infrastructure Security (IAM, WAFs, encryption), Application Security (access management, data tenancy), and Identity and Access Management (Azure AD). Experience with Agile & DevSecOps methodologies is essential for promoting automated security features. An advanced degree in Computer Science or a related discipline, or equivalent work experience, is required, along with five or more years of experience in information security risk management and communicating security findings to various stakeholders. Exceptional judgment, communication, and decision-making skills are highly valued.