דרושים Gms-service Excellence Manager ב-Ey ב-India, Thiruvananthapuram

Working in our practice, you will have the opportunity to work with clients to provide practical risk management, internal audit solutions and gaining valuable experience in a variety of clients.

Your key responsibilities

The current role requires leading internal audit and other risk consulting engagements for Real Estate construction companies. As part of the role, the candidate is expected to:

• Responsible for leading and executing client engagements and meeting the expectations of the client and the onsite team within the MENA region.
• Ability to interact with all levels of management, including C-Suite management
• Possess in-depth sector knowledge and practical experience in at least one of the following industries: Real Estate & Construction, Airport, or Aviation.
• Have thorough knowledge and understanding of Internal Audit methodology and IIA requirements.
• Deliver / manage engagements to time, cost and high quality.
• Identify key areas of improvement in the client's business processes and add value by preparing insightful recommendations.
• Contribute to business development activities such as preparing proposals, lead identification
• Always comply with the firm’s quality and risk management policies
• Manage multiple assignments and related project teams.
• Maintain excellent rapport and proactive communication with the client
• Mentor and coach junior team members, enabling them to meet their performance goals and successfully grow their careers
• Manage the engagement budgets and support superiors in developing marketing collaterals, business proposals and new solution / methodology development

Skills and attributes for success

• Exceptional command on spoken and written English
• Globally mobile and flexible to travel to onsite locations at a short notice
• Highly analytical, organised and meticulous consulting skills
• Demonstrating and applying strong project management skills, inspiring teamwork and responsibility with engagement team members
• Ability to multi-task, work well under pressure with commitment to deliver under tight deadline
• Strong organizational skills with ability to prioritize effectively
• Attention to detail and quality assurance
• Proficient in MS-Office Suite, data analysis & validation

To qualify for the role, you must have

• Bachelor’s degree in Engineering or relevant professional qualification such as CA, ACCA,CIA
• Experience in Internal Audit /Risk Management with Real Estate and Construction sector focus
• A minimum of 11 years of relevant work experience
• A valid passport for travel.

You get to work with inspiring and meaningful projects. Our focus is education and coaching alongside practical experience to ensure your personal development. We value our employees and you will be able to control your own development with an individual progression plan. You will quickly grow into a responsible role with challenging and stimulating assignments. Moreover, you will be part of an interdisciplinary environment that emphasizes high quality and knowledge exchange. Plus, we offer:

• Support, coaching and feedback from some of the most engaging colleagues around
• Opportunities to develop new skills and progress your career
• The freedom and flexibility to handle your role in a way that’s right for you

KEY Capabilities:

• Experience in working with SIEM Solutions such as Splunk or Azure Sentinel.
• Experience in working with any of Endpoint Detection and Response tools preferably Crowdstrike, Sentinel One or Microsoft Defender for Endpoint.
• Expertise in SIEM and EDR content development with an eye towards behavior-based detection logic.
• Strong background in host based and network-based behaviors.
• Familiarity of Windows Event ID’s and common application logs.
• Knowledge in programming or scripting languages such as Batch Scripting, Python PowerShell, etc.
• Experience in purple teaming activities.
• Hands-on experience on threat Hunting for identification of interested events for content development.
• Analyze and investigate broad range of threats or cyber activities occurring on daily basis.
• Provide actionable insights to help identify, detect, prevent, and respond to potentially malicious activities.

Qualification & experience:

• Minimum of 3 to 7 years’ experience with in-depth host, network architecture knowledge that will translate over to effective content development.
• Minimum of 3 years SOC experience.
• An adversarial mindset, understanding the goals, behaviors, and TTPs of threat actors.
• Strong oral, written and listening skills are an essential component to effective consulting.
• Ability to work at all layers of the OSI models, including being able to explain communication at any level is necessary.
• Must have content development knowledge in Endpoint Detection and Response (Defender/CrowdStrike), SIEM (Splunk/Sentinel).
• Must have knowledge of Windows and Linux basics including command and script interpreters, PowerShell, registries etc.
• Troubleshoot EDR and SIEM platform and application issues, escalate and work with relevant teams to resolve issues.
• Certifications in a core security related discipline will be an added advantage.
• Certification in any one of the SIEM, EDR or Network Solutions such as Splunk, Azure Sentinel, Falcon Crowdstrike, SentinelOne will be an added advantage.

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Your key responsibilities

• Evaluate key cloud security solutions such as Cloud Security Posture Management (CSPM), Cloud Workload Protection Platforms (CWPP), Identity and Access Management (IAM), Cloud Access Security Brokers (CASB), Web Application Firewalls (WAF), Cloud encryption and key management services, Security Information and Event Management (SIEM), and security automation tools with respect to hybrid cloud security posture (AWS, Azure, GCP, and on-premises).
• Evaluate the effectiveness of the implementation and operations of vulnerability management and patching programs, including timely identification, prioritization, and remediation of cloud and on-premises vulnerabilities
• Evaluate security hardening standards and secure cloud configuration best practices across all environments.
• Evaluate DevSecOps implementation to embed security into CI/CD pipelines and cloud deployments.
• Evaluate the current practice followed of cloud security monitoring and incident management
• Conducting risk assessments and vulnerability analyses in cloud environments and propose mitigation strategies
• Support larger Internal Audit and Cyber security audits engagements especially on domains related to cloud security
• Develop cloud security policies/procedures to protect data in the cloud and prevent unauthorized access.
• Good understanding of cloud security standards/regulations globally and within the MENA region (KSA, UAE, Qatar)
• Communicate cloud security risks, strategies, and remediation plans clearly to technical teams and senior management
• Ability to translate complex technical details into clear, business-understandable language for effective communication with stakeholders/business users
• Good in report writing and convey the observations to the top management in layman’s language emphasizing on the business risks.
• Build a team under you focused on cloud security and mentor junior resources
• Facilitate knowledge sharing and cross-team collaboration to enhance cloud security skills within the group
• Should be open-minded and ready to take up additional challenges or tasks outside your core domain expertise

Skills and attributes for success

• Strong technical knowledge of AWS, Azure, GCP, OCI and on-premises security architectures and controls.
• Proven ability to evaluate cloud security technologies, policies and processes.
• Experience conducting cloud risk assessments against global/MENA specific standards/regulations
• Experience managing cloud security metrics, reporting, and audit readiness.
• Excellent communication and stakeholder management skills.
• Experience in incident management and response in cloud environments.
• Familiarity with DevSecOps and secure CI/CD practices in Cloud

To qualify for the role, you must have

• 7–14 years of experience in cloud security, with hands-on expertise in hybrid and multi-cloud environments.
• Excellent communication skills with consulting experience preferred

Ideally, you’ll also have

• A bachelor's or master's degree in B. TECH/B. E, MS, MBA in accounting or a related discipline.
• CCSP (Certified Cloud Security Professional)
• AWS Certified Security – Specialty
• Microsoft Certified: Azure Security Engineer Associate
• Google Cloud Professional Cloud Security Engineer)

You get to work with inspiring and meaningful projects. Our focus is education and coaching alongside practical experience to ensure your personal development. We value our employees and you will be able to control your own development with an individual progression plan. You will quickly grow into a responsible role with challenging and stimulating assignments. Moreover, you will be part of an interdisciplinary environment that emphasizes high quality and knowledge exchange. Plus, we offer:

• Support, coaching and feedback from some of the most engaging colleagues around
• Opportunities to develop new skills and progress your career
• The freedom and flexibility to handle your role in a way that’s right for you

KEY Capabilities:

• Experience in working with Splunk Enterprise, Splunk Enterprise Security & Splunk UEBA
• Minimum of Splunk Power User Certification
• Good knowledge in programming or Scripting languages such as Python (preferred), JavaScript (preferred), Bash, PowerShell, Bash, etc.
• Perform remote and on-site gap assessment of the SIEM solution.
• Define evaluation criteria & approach based on the Client requirement & scope factoring industry best practices & regulations
• Conduct interview with stakeholders, review documents (SOPs, Architecture diagrams etc.)
• Evaluate SIEM based on the defined criteria and prepare audit reports
• Good experience in providing consulting to customers during the testing, evaluation, pilot, production and training phases to ensure a successful deployment.
• Understand customer requirements and recommend best practices for SIEM solutions.
• Offer consultative advice in security principles and best practices related to SIEM operations
• Design and document a SIEM solution to meet the customer needs
• Experience in onboarding data into Splunk from various sources including unsupported (in-house built) by creating custom parsers
• Verification of data of log sources in the SIEM, following the Common Information Model (CIM)
• Experience in parsing and masking of data prior to ingestion in SIEM
• Provide support for the data collection, processing, analysis and operational reporting systems including planning, installation, configuration, testing, troubleshooting and problem resolution
• Assist clients to fully optimize the SIEM system capabilities as well as the audit and logging features of the event log sources
• Assist client with technical guidance to configure end log sources (in-scope) to be integrated to the SIEM
• Experience in handling big data integration via Splunk
• Expertise in SIEM content development which includes developing process for automated security event monitoring and alerting along with corresponding event response plans for systems
• Hands-on experience in development and customization of Splunk Apps & Add-Ons
• Builds advanced visualizations (Interactive Drilldown, Glass tables etc.)
• Build and integrate contextual data into notable events
• Experience in creating use cases under Cyber kill chain and MITRE attack framework
• Capability in developing advanced dashboards (with CSS, JavaScript, HTML, XML) and reports that can provide near real time visibility into the performance of client applications.
• Experience in installation, configuration and usage of premium Splunk Apps and Add-ons such as ES App, UEBA, ITSI etc
• Sound knowledge in configuration of Alerts and Reports.
• Good exposure in automatic lookup, data models and creating complex SPL queries.
• Create, modify and tune the SIEM rules to adjust the specifications of alerts and incidents to meet client requirement
• Work with the client SPOC to for correlation rule tuning (as per use case management life cycle), incident classification and prioritization recommendations
• Experience in creating custom commands, custom alert action, adaptive response actions etc.

Qualification & experience:

• Minimum of 3 to 10 years’ experience with a depth of network architecture knowledge that will translate over to deploying and integrating a complicated security intelligence solution into global enterprise environments.
• Strong oral, written and listening skills are an essential component to effective consulting.
• Strong background in network administration. Ability to work at all layers of the OSI models, including being able to explain communication at any level is necessary.
• Must have knowledge of Vulnerability Management, Windows and Linux basics including installations, Windows Domains, trusts, GPOs, server roles, Windows security policies, user administration, Linux security and troubleshooting.
• Good to have below mentioned experience with designing and implementation of Splunk with a focus on IT Operations, Application Analytics, User Experience, Application Performance and Security Management
• Multiple cluster deployments & management experience as per Vendor guidelines and industry best practices
• Troubleshoot Splunk platform and application issues, escalate the issue and work with Splunk support to resolve issues
• Certification in any one of the SIEM Solution such as IBM QRadar, Exabeam, Securonix will be an added advantage
• Certifications in a core security related discipline will be an added advantage.

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Key Responsibilities:

• Design, develop, and maintain robust data pipelines using GCP services such as BigQuery, Dataflow, Pub/Sub, CloudSQL, Cloud Composer (Airflow).
• Build and manage Airflow DAGs for orchestrating complex workflows.
• Write efficient and reusable Python scripts for data processing and automation.
• Develop solutions to move and transform data across GCP projects securely and efficiently.
• Collaborate with data scientists, analysts, and other engineers to ensure data availability and quality.
• Optimize data workflows for performance, scalability, and cost-efficiency.

Required Skills & Qualifications:

• Minimum 4 years of experience in data engineering, with at least 2+ years on GCP.
• Strong expertise in BigQuery, Dataflow, Pub/Sub, CloudSQL, Composer/Airflow.
• Proficient in Python for scripting and automation.
• Experience in designing and implementing data pipelines across GCP projects.
• Familiarity with CI/CD practices and version control (e.g., Git).
• Excellent problem-solving and communication skills.

Nice to Have:

• Experience with Terraform or other IaC tools.
• Knowledge of data governance and security best practices on GCP.
• Exposure to real-time data processing and streaming architectures.

What we look for :People with the ability to work in a collaborative manner to provide services across multiple client departments while following the commercial and legal requirements. You will need a practical approach to solving issues and complex problems with the ability to deliver insightful and practical solutions. We look for people who are agile, curious, mindful and able to sustain positive energy, while being adaptable and creative in their approach.

Global Managed Service – Identity and access Management – Senior

The IAM Administrator role will be primarily responsible for the support and enhancements that are required for the engagement. Also adhering to stated SLA’s and ensuring high standards of quality deliverables.

Key Requirements / Responsibilities:

• 4+ years of experience in support, customization, configuration and deployment of any Identity Management and Governance products
• Experience in working on any two IAM engagements providing application support.
• Provide Level 2 and Level 3 support for the system within agreed service levels.
• Should have experience on One Identity requirement gathering, design and implementation.
• Will be responsible for applications onboarding.
• Experience in implementing at least two IAM engagements including requirements gathering, analysis, design development, testing deployment and application support (One Identity/other IAM)
• Experience in technologies, such as VB.net, LDAP, AD and SQL.
• Good knowledge of Web/application servers (IIS, WebSphere WebLogic, JBoss and Apache)
• Experience in development configuration of standard custom IAM integrations using VB.net.
• Experience in hands on development, estimations, sizing and custom IAM integrations.
• Advanced documentation and presentation skills and well-versed with SDLC process.
• Ability to create plan and execute advanced IAM trainings and independently drive proof of concepts involving emerging IAM technologies.
• Exposure to process frameworks and methodologies.
• Should have experience in interacting with Clients, including working with client teams in an onsite and offshore delivery model.
• Contribute to eminence activities, such as automating manual tasks performed by One Identity Administration team.
• Customize, configure, and develop One Identity solution integrations using requirements and design and independently manage project deliverables to successful completion.
• Lead process compliance activities by identifying and driving initiatives that are relevant for the project delivery and help factor reusability and related benefits.
• Vendor coordination
• Application patch deployment.
• Troubleshoot One Identity Issues
• Understands of below IGA concepts:
  • User Lifecycle Management, Provisioning, and Reconciliation
  • Auditing, Reporting, and user activity Monitoring
  • Access Certification
  • SOD
• Strong communication skills, both verbal and written

Qualifications:

Education:

• Bachelor's Degree required.

Skills Expertise

• OneIdentity Manager 6.0, 7.0 or later
• Scripting knowledge like VB.net, PowerShell etc.
• Good soft skills i.e. verbal & written communication, technical document writing etc.
• Exposure to global security standards e.g. PCI, SOX, HIPAA etc.
• Prior experience working in remote teams on global scale.

Work Requirements:

• Willingness to work in shifts as required

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Key Responsibilities

• Craft and update Market Conduct risk management policies and procedures for clients, ensuring the effective governance of Market Conduct risks.
• Ensure that regulated entities comply with all applicable market conduct regulations and consumer protection laws.
• Review and analyse new regulations to determine their impact on business operations.
• Identify key market conduct and consumer protection risks across various jurisdictions for a range of clients
• Conduct or participate in examinations of insurance companies, banks, or other financial institutions to assess compliance with market conduct standards.
• Investigate consumer complaints to identify potential violations of market conduct rules.
• Work with other departments to resolve consumer complaints and issues in a timely and fair manner.
• Prepare reports detailing findings from examinations and audits.
• Develop key risk indicators for consumer compliance and continuously monitor metrics associated with principal market conduct risks
• Analyse and report on client risk frameworks to enhance market conduct and compliance management
• Stay updated with industry and regulatory developments, especially concerning consumer protection enforcement actions and new regulations, to provide informed advisory services to clients.

Required skills and experience:

• MBA/PGDM/Legal qualification with a focus on Finance
• 6+ years of experience in Compliance/Legal roles within the financial services industry
• Proficient in interpreting banking CBUAE regulations, understanding their impact on consumer business processes, and identifying consumer compliance and market conduct risks.
• Strong relationship management skills, capable of fostering trust and collaboration with clients.
• Extensive knowledge of banking products and services, with the ability to advise clients on best practices.
  

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.