Cyber - Enterprise Security Architect - Senior - Consulting
for section headings. Use - for any list of duties/requirements/benefits, and
for prose.
We need to preserve all substantive information, not invent or summarize away detail. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning, duplicated lines, application instructions. So we need to cut out the EEO statement, the "Are you ready..." application instructions, the "To make the most of your application experience..." etc. Also remove the "EY | Building a better working world" etc. Also remove the "EY provides equal employment opportunities..." etc. Also remove the "If you have a disability..." etc.
We need to keep location line? "Location: Anywhere in Country". That's metadata; we can fold into a short
or drop it. Probably include as a short paragraph.
We need to keep the salary ranges and benefits description.
We need to keep the "What We Offer You" paragraph about total rewards.
We need to keep the "The salary range for this job is:" with specifics.
We need to keep the "What We Look For" paragraph.
We need to keep the "Ideally, You'll Also Have" list.
We need to keep the "To Qualify for the Role, You Must Have" list.
We need to keep the "Skills And Attributes For Success" list.
We need to keep "Your Key Responsibilities" list.
We need to keep the introductory paragraph about opportunity and role description.
We need to keep the "Location: Anywhere in Country" maybe as a
.
We must not create sections with filler like "commensurate with experience". Not present.
We must not create Pay/Schedule/Benefits sections unless posting actually states them. Pay is stated (salary range). Benefits is stated (Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options). So we can have Benefits section.
Schedule not present, so omit.
We need to decide headings: About the role (maybe combine location and intro). Responsibilities. Skills And Attributes For Success. Qualifications (maybe combine To Qualify and Ideally You'll Also Have and What We Look For? But they are distinct; we could have Qualifications and Preferred Qualifications. But instructions: prefer a few substantive sections over many thin ones. Could combine Qualifications and Preferred into one Qualifications section. But we need to preserve all detail; we can still have subheadings? Not allowed; only
for section headings. Could have one Qualifications section containing both required and preferred lists. That's okay.
What We Look For could be merged into Qualifications as well (it's more about desired traits). Could be part of Qualifications.
What We Offer You => Benefits.
Pay => Pay section.
Thus sections: About the role, Responsibilities, Qualifications, Benefits, Pay.
We need to ensure we don't create empty sections.
Now we need to format lists.
For About the role: we have location line and the introductory paragraph(s). Let's extract:
"Location: Anywhere in Country"
Then: "At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world."
Then: "The Opportunity As organizations undertake large-scale digital transformation, cloud migration, and technology modernization initiatives, the need for robust, scalable security architecture has never been greater. Security architecture decisions made today define an organization's risk posture for years to come—shaping how data is protected, how systems are connected, and how threats are detected and contained. As a Senior Consultant within EY's Cyber practice focused on Enterprise Security Architecture, you will work with clients to assess existing security architectures, design future-state security frameworks, and develop practical roadmaps that align security capabilities with enterprise strategy. This role offers the opportunity to engage in technically hands-on architecture work alongside strategic advisory engagements across diverse industries."
We can combine into prose paragraphs.
Now Responsibilities: "Your Key Responsibilities As a Senior Consultant in Enterprise Security Architecture, you will play an active and technically engaged role in delivering security architecture assessments, design engagements, and transformation initiatives while collaborating closely with clients and EY engagement teams. You will evaluate existing security architectures, identify gaps and risks across network, cloud, application, data, and identity domains, and develop actionable recommendations grounded in industry frameworks and leading practices. You will design and document future-state security architectures, reference models, and security patterns that address client-specific risk profiles and business objectives, and support clients in defining technology roadmaps that guide security investment and capability development. In addition, as a Senior Consultant, you will contribute to the development of enterprise security architecture standards, policies, and governance frameworks that embed security requirements into technology and business change programs. You will support clients in applying Zero Trust principles, securing hybrid and multi-cloud environments, and aligning architecture decisions to established frameworks such as SABSA, TOGAF, and NIST. You will prepare client deliverables, architecture documentation, and executive-level presentations that communicate complex technical concepts to both technical and non-technical audiences. You will collaborate with multidisciplinary teams to deliver high-quality work products, support project planning and management activities, mentor junior team members, and contribute to business development initiatives, thought leadership, and practice-building efforts within EY's Cyber practice."
We need to turn into - items. Each sentence could be a list item. But we need to preserve all substantive information; we can break into items per sentence or per clause. Probably each sentence as
- . Ensure we don't lose any detail.
Now Qualifications: combine required, preferred, and What We Look For.
Required: "To Qualify for the Role, You Must Have A bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, and approximately 3–5 years of relevant experience; or a graduate degree and 2–4 years of relevant experience.Experience in one or more of the following areas:Enterprise security architecture assessments and future-state architecture designNetwork security architecture, including segmentation, secure access, and perimeter designCloud security architecture across AWS, Azure, or GCP, including IaaS, PaaS, and SaaS securityIdentity and access management architecture, including Zero Trust and privileged access designApplication security architecture, secure SDLC, and DevSecOps integrationData protection architecture, including encryption, data classification, and data loss preventionSecurity architecture governance, standards development, and architecture review processesKnowledge of cybersecurity frameworks and standards, including NIST CSF, NIST 800-53, ISO 27001/27002, CIS Controls, and SABSA.Experience conducting security architecture reviews, threat modeling, and risk assessments in complex enterprise environments.Strong Microsoft PowerPoint, Excel, and Word skills.Willingness to travel based on client and business needs; travel estimated at 25–50%"
We need to split into list items. The list after "Experience in one or more of the following areas:" seems to be a list of areas. We'll make each area a
- . Also the degree/experience requirement could be a
- . Also Microsoft skills, travel willingness.
Preferred: "Ideally, You'll Also Have Professional certifications such as CISSP, CCSP, SABSA Chartered Architect (SCF/SCM), TOGAF, or other relevant security architecture credentials.Hands-on experience with security architecture tooling, including architecture modeling platforms, threat modeling tools, and cloud-native security services.Experience designing and implementing Zero Trust architectures, including microsegmentation, identity-centric access, and continuous verification models.Knowledge of security technology domains including SIEM, SOAR, EDR/XDR, PAM, IAM, CNAPP, and CASB, with the ability to assess their architectural fit within enterprise environments.Exposure to regulatory and compliance requirements—such as HIPAA, PCI DSS, FISMA, GDPR, or NYDFS—and their implications for security architecture decisions.Experience facilitating client workshops, technical design sessions, and architecture review board engagements.Background in software development, infrastructure engineering, or network engineering that informs deep technical architecture credibility.Experience within a consulting, professional services, or advisory environment.Knowledge of regulated industries such as financial services, healthcare, life sciences, government, or critical infrastructure."
What We Look For: "We are seeking professionals who combine deep technical security architecture expertise with the advisory skills needed to translate complex design decisions into clear, actionable client guidance. Successful candidates bring hands-on architecture experience across multiple security domains alongside strong business judgment and the ability to engage confidently with both engineering teams and executive stakeholders. The ideal candidate is passionate about designing security that enables business outcomes, committed to delivering exceptional client service, and eager to contribute to the growth and innovation of EY's Cyber practice."
We can incorporate these as list items as well, maybe under Qualifications.
Now Benefits: "What We Offer You At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options."
We need to keep the "Learn more at ey.com/us/careers." That's a link but we can keep as plain text.
Now Pay: "The salary range for this job is:New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $125,800 to $209,700Bay Area California offices – $131,100 to $218,500All other offices locations in the US, including Sacramento – $104,800 to $192,200Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography."
We need to preserve that exactly.
Now we need to output only HTML fragment, no /, no markdown fences.
We'll produce:
Location: Anywhere in Country
At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.
The Opportunity As organizations undertake large-scale digital transformation, cloud migration, and technology modernization initiatives, the need for robust, scalable security architecture has never been greater. Security architecture decisions made today define an organization's risk posture for years to come—shaping how data is protected, how systems are connected, and how threats are detected and contained. As a Senior Consultant within EY's Cyber practice focused on Enterprise Security Architecture, you will work with clients to assess existing security architectures, design future-state security frameworks, and develop practical roadmaps that align security capabilities with enterprise strategy. This role offers the opportunity to engage in technically hands-on architecture work alongside strategic advisory engagements across diverse industries.
Then sections:
About the role
... but we already have intro paragraphs; maybe we should not duplicate. Actually About the role section could contain the location and intro paragraphs. So we will put About the role
then the
for prose. We need to preserve all substantive information, not invent or summarize away detail. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning, duplicated lines, application instructions. So we need to cut out the EEO statement, the "Are you ready..." application instructions, the "To make the most of your application experience..." etc. Also remove the "EY | Building a better working world" etc. Also remove the "EY provides equal employment opportunities..." etc. Also remove the "If you have a disability..." etc. We need to keep location line? "Location: Anywhere in Country". That's metadata; we can fold into a short
or drop it. Probably include as a short paragraph. We need to keep the salary ranges and benefits description. We need to keep the "What We Offer You" paragraph about total rewards. We need to keep the "The salary range for this job is:" with specifics. We need to keep the "What We Look For" paragraph. We need to keep the "Ideally, You'll Also Have" list. We need to keep the "To Qualify for the Role, You Must Have" list. We need to keep the "Skills And Attributes For Success" list. We need to keep "Your Key Responsibilities" list. We need to keep the introductory paragraph about opportunity and role description. We need to keep the "Location: Anywhere in Country" maybe as a
. We must not create sections with filler like "commensurate with experience". Not present. We must not create Pay/Schedule/Benefits sections unless posting actually states them. Pay is stated (salary range). Benefits is stated (Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options). So we can have Benefits section. Schedule not present, so omit. We need to decide headings: About the role (maybe combine location and intro). Responsibilities. Skills And Attributes For Success. Qualifications (maybe combine To Qualify and Ideally You'll Also Have and What We Look For? But they are distinct; we could have Qualifications and Preferred Qualifications. But instructions: prefer a few substantive sections over many thin ones. Could combine Qualifications and Preferred into one Qualifications section. But we need to preserve all detail; we can still have subheadings? Not allowed; only
for section headings. Could have one Qualifications section containing both required and preferred lists. That's okay.
What We Look For could be merged into Qualifications as well (it's more about desired traits). Could be part of Qualifications.
What We Offer You => Benefits.
Pay => Pay section.
Thus sections: About the role, Responsibilities, Qualifications, Benefits, Pay.
We need to ensure we don't create empty sections.
Now we need to format lists.
For About the role: we have location line and the introductory paragraph(s). Let's extract:
"Location: Anywhere in Country"
Then: "At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world."
Then: "The Opportunity As organizations undertake large-scale digital transformation, cloud migration, and technology modernization initiatives, the need for robust, scalable security architecture has never been greater. Security architecture decisions made today define an organization's risk posture for years to come—shaping how data is protected, how systems are connected, and how threats are detected and contained. As a Senior Consultant within EY's Cyber practice focused on Enterprise Security Architecture, you will work with clients to assess existing security architectures, design future-state security frameworks, and develop practical roadmaps that align security capabilities with enterprise strategy. This role offers the opportunity to engage in technically hands-on architecture work alongside strategic advisory engagements across diverse industries."
We can combine into prose paragraphs.
Now Responsibilities: "Your Key Responsibilities As a Senior Consultant in Enterprise Security Architecture, you will play an active and technically engaged role in delivering security architecture assessments, design engagements, and transformation initiatives while collaborating closely with clients and EY engagement teams. You will evaluate existing security architectures, identify gaps and risks across network, cloud, application, data, and identity domains, and develop actionable recommendations grounded in industry frameworks and leading practices. You will design and document future-state security architectures, reference models, and security patterns that address client-specific risk profiles and business objectives, and support clients in defining technology roadmaps that guide security investment and capability development. In addition, as a Senior Consultant, you will contribute to the development of enterprise security architecture standards, policies, and governance frameworks that embed security requirements into technology and business change programs. You will support clients in applying Zero Trust principles, securing hybrid and multi-cloud environments, and aligning architecture decisions to established frameworks such as SABSA, TOGAF, and NIST. You will prepare client deliverables, architecture documentation, and executive-level presentations that communicate complex technical concepts to both technical and non-technical audiences. You will collaborate with multidisciplinary teams to deliver high-quality work products, support project planning and management activities, mentor junior team members, and contribute to business development initiatives, thought leadership, and practice-building efforts within EY's Cyber practice."
We need to turn into - items. Each sentence could be a list item. But we need to preserve all substantive information; we can break into items per sentence or per clause. Probably each sentence as
- . Ensure we don't lose any detail.
Now Qualifications: combine required, preferred, and What We Look For.
Required: "To Qualify for the Role, You Must Have A bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, and approximately 3–5 years of relevant experience; or a graduate degree and 2–4 years of relevant experience.Experience in one or more of the following areas:Enterprise security architecture assessments and future-state architecture designNetwork security architecture, including segmentation, secure access, and perimeter designCloud security architecture across AWS, Azure, or GCP, including IaaS, PaaS, and SaaS securityIdentity and access management architecture, including Zero Trust and privileged access designApplication security architecture, secure SDLC, and DevSecOps integrationData protection architecture, including encryption, data classification, and data loss preventionSecurity architecture governance, standards development, and architecture review processesKnowledge of cybersecurity frameworks and standards, including NIST CSF, NIST 800-53, ISO 27001/27002, CIS Controls, and SABSA.Experience conducting security architecture reviews, threat modeling, and risk assessments in complex enterprise environments.Strong Microsoft PowerPoint, Excel, and Word skills.Willingness to travel based on client and business needs; travel estimated at 25–50%"
We need to split into list items. The list after "Experience in one or more of the following areas:" seems to be a list of areas. We'll make each area a
- . Also the degree/experience requirement could be a
- . Also Microsoft skills, travel willingness.
Preferred: "Ideally, You'll Also Have Professional certifications such as CISSP, CCSP, SABSA Chartered Architect (SCF/SCM), TOGAF, or other relevant security architecture credentials.Hands-on experience with security architecture tooling, including architecture modeling platforms, threat modeling tools, and cloud-native security services.Experience designing and implementing Zero Trust architectures, including microsegmentation, identity-centric access, and continuous verification models.Knowledge of security technology domains including SIEM, SOAR, EDR/XDR, PAM, IAM, CNAPP, and CASB, with the ability to assess their architectural fit within enterprise environments.Exposure to regulatory and compliance requirements—such as HIPAA, PCI DSS, FISMA, GDPR, or NYDFS—and their implications for security architecture decisions.Experience facilitating client workshops, technical design sessions, and architecture review board engagements.Background in software development, infrastructure engineering, or network engineering that informs deep technical architecture credibility.Experience within a consulting, professional services, or advisory environment.Knowledge of regulated industries such as financial services, healthcare, life sciences, government, or critical infrastructure."
What We Look For: "We are seeking professionals who combine deep technical security architecture expertise with the advisory skills needed to translate complex design decisions into clear, actionable client guidance. Successful candidates bring hands-on architecture experience across multiple security domains alongside strong business judgment and the ability to engage confidently with both engineering teams and executive stakeholders. The ideal candidate is passionate about designing security that enables business outcomes, committed to delivering exceptional client service, and eager to contribute to the growth and innovation of EY's Cyber practice."
We can incorporate these as list items as well, maybe under Qualifications.
Now Benefits: "What We Offer You At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options."
We need to keep the "Learn more at ey.com/us/careers." That's a link but we can keep as plain text.
Now Pay: "The salary range for this job is:New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $125,800 to $209,700Bay Area California offices – $131,100 to $218,500All other offices locations in the US, including Sacramento – $104,800 to $192,200Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography."
We need to preserve that exactly.
Now we need to output only HTML fragment, no /, no markdown fences.
We'll produce:
Location: Anywhere in Country
At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.
The Opportunity As organizations undertake large-scale digital transformation, cloud migration, and technology modernization initiatives, the need for robust, scalable security architecture has never been greater. Security architecture decisions made today define an organization's risk posture for years to come—shaping how data is protected, how systems are connected, and how threats are detected and contained. As a Senior Consultant within EY's Cyber practice focused on Enterprise Security Architecture, you will work with clients to assess existing security architectures, design future-state security frameworks, and develop practical roadmaps that align security capabilities with enterprise strategy. This role offers the opportunity to engage in technically hands-on architecture work alongside strategic advisory engagements across diverse industries.
Then sections:
About the role
... but we already have intro paragraphs; maybe we should not duplicate. Actually About the role section could contain the location and intro paragraphs. So we will put About the role
then the
Location: Anywhere in Country
At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.
The Opportunity As organizations undertake large-scale digital transformation, cloud migration, and technology modernization initiatives, the need for robust, scalable security architecture has never been greater. Security architecture decisions made today define an organization's risk posture for years to come—shaping how data is protected, how systems are connected, and how threats are detected and contained. As a Senior Consultant within EY's Cyber practice focused on Enterprise Security Architecture, you will work with clients to assess existing security architectures, design future-state security frameworks, and develop practical roadmaps that align security capabilities with enterprise strategy. This role offers the opportunity to engage in technically hands-on architecture work alongside strategic advisory engagements across diverse industries.
Then sections: