EY Security Consultant 

Poland, Masovian Voivodeship, Zgorzała 

853080965

Rank of role: 63

Your key responsibilities

• Define security architectures and provide pragmatic security guidance that balance business benefit and risks.
• Engage technology teams in order to evaluate and prescribe security controls at all touchpoints throughout the technology architecture
• Define security configuration standards for platforms and technologies
• Provide knowledge sharing and technical assistance to other team members
• Act as Subject Matter Expert (SME) in responsible technologies and have deep technical understanding of responsible portfolios
• Perform risk assessments of information systems and infrastructure
• Maintain and enhance the Information Security risk assessment methodology
• Develop appropriate risk treatment and mitigation options to address security risks identified during security review or audit
• Translate technical vulnerabilities into business risk terminology for business units and recommend corrective actions to customers and project stake-holders

Skills and attributes for success

• Cloud technologies (MS Azure specifically)
• Strategic skills to analyze technology architectures and software solutions, identify security risk and prescribe mitigating security measures in accordance with the firm’s risk tolerance level.
• Five or more years working experience with the architecture, design and engineering of web-based multi-tier information systems or network infrastructures
• Experience with security architecture, design and assessment of accounting and auditing systems.
• Ability to appropriately balance firm security needs with business impact & benefit
• Ability to facilitate compromise to incrementally advance security strategy and objectives
• An overall understanding of the business objectives of EY with an ability to build relationships with business partners and across EY IT
• Ability to team well with others to facilitate and enhance the understanding & compliance to security policies
• Experience facilitating meetings with multiple customers and technical staff, including building consensus and mediating compromise
• High degree of tolerance for ambiguity
• Experience conducting risk assessments, vulnerability assessments, vendor and third party risk assessments and recommending risk remediation strategies
• Experience working with common information security standards, such as: ISO 27001/27002, NIST, PCI DSS, ITIL, COBIT

To qualify for the role, you must have

Education

• An advanced degree in Computer Science or a related discipline, or equivalent work experience

Required Experience

• Five or more years of experience in security architecture, application security, networking, data center configuration, cloud technology, and the management of a significant Information Security risk functions
• 8 or more years of experience in an Information Security or Information Technology discipline
• Experience in the Agile development lifecycle
• Experience in managing the communication of security findings and recommendations to IT project teams and management
• Exceptional judgment, tact, and decision-making ability
• Flexibility to adjust to multiple demands, shifting priorities, ambiguity, and rapid change
• Outstanding management, interpersonal, communication, organizational, and decision-making skills
• Strong English language skills are required

Ideally, you’ll also have

• Experience with cloud technology solutions, particularly MS Cloud
• Experience in technologies such as block chain, RPA, AI, etc.
• Knowledge of the Scaled Agile Framework

Certification requirements

• Candidates are preferred to hold or be actively pursuing related professional certifications within the GIAC family of certifications or CISSP, CISM or CISA

What we offer

EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across nine locations – Argentina, Hungary, India, the Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom – and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. We’ll introduce you to an ever-expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.

• Continuous learning : You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you : We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership : We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

In compliance with the requirements of the Whistleblower Protection Act, our company has established theProcedure for reporting breaches of law and undertaking appropriate follow-up actions