EY Senior Consultant Cyber Resilience Financial Services 

United Kingdom, England, London 

248301750

The role

UK Financial Services Cyber Security professionals draw upon their knowledge and experience to support client engagement teams, provide research underpinning advice to a variety of clients and contribute to a variety of business development activities.This means helping clients understand and navigate UK and international cyber-related regulations (e.g., NIS2). You will support the delivery of cyber programmes, as well as some of the more foundational cyber disciplines such as identity and access management, data loss protection and data protection.

Your key responsibilities

You will be working across a portfolio of engagements with our financial services clients, reporting to a Manager or Senior Manager. Your responsibilities will include:

• Supporting our clients in developing and enhancing their cyber frameworks and capabilities.
• Helping clients understand the regulatory requirements they are faced with.
• Conducting security assessments and gap analyses related to threat, vulnerability and penetration testing (e.g., MITRE, CBEST, TIBER) determine develop measures and roadmaps to remediate them.
• Facilitating training to client teams.
• Collaborating with cross-functional teams to ensure a holistic approach to cybersecurity.
• Evaluating and creating measures and controls to implement the regulatory requirements in diverse client environments.
• Keeping abreast of regulatory changes, events, and industry best practices in cyber.
• Contributing to thought leadership and business development activities.
• Assisting in overseeing project metrics by organising staffing, tracking budget, and proactively communicating risks, issues, and dependencies to project leaders.

Skills and attributes for success

You will have a broad background across cyber with an understanding of and interest in one or several of the following areas:

• Cyber regulatory requirements across the UK and EU (e.g., PRA, FCA, BoE, ECB)
• Design and implementation of governance frameworks, processes, and controls
• Financial services cybersecurity threat landscape
• Cybersecurity architecture design and implementation, including Cloud
• Cyberthreat management
• Information security and non-financial operational risk requirements and frameworks
• Security policies and procedures, standards, and controls in line with regulation and/or current standards (e.g. ISO27001)
• Data privacy, implementation of data protection/GDPR programmes to address confidentiality and security

To qualify for the role, you must have:

• Strong academic record including a relevant undergraduate (Bachelors) degree.
• experience in a relevant industry (desirable experience in resilience, continuity or cyber).
• A passion for collaborating with a team and clients to solve complex problems.

Additional requirements (desirable):

• Experience in Financial Services, Consulting, Government Organisations or Military.
• Security related qualifications such as CISSP, CISA or CISM.
• Project and programme related qualifications; Prince II, Scrum, Agile.

What working at EY offers

• Opportunities to develop new skills and progress your career.
• The freedom and flexibility to handle your role in a way that’s right for you.
• Excellent training and development prospects, both through established programmes and on-the-job training.
• Support, coaching and feedback from our collaborative colleagues.
• An excellent team of senior colleagues, dedicated to managing and varying your workload and supporting your growth.
• An international work environment with a diverse and inclusive team.
• A competitive remuneration package. Our comprehensive Total Rewards package includes support for flexible working and career development, and with FlexEY you can select benefits that suit your needs, covering holidays, health and well-being, insurance, savings, and a wide range of discounts, offers and promotions.