Cyber - Enterprise Security Architect - Senior - Consulting
for section headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must not repeat job title as heading. No Job ID etc. Remove boilerplate.
We need to extract substantive info.
Let's parse the posting.
First paragraph: "Location: Anywhere in Country At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world."
That's generic intro; could be "About the role" maybe. But we need sections only if real specific content. This is generic but still about the role. Probably we can put under "About the role". It's not filler like "commensurate with experience". It's okay.
Next: "The Opportunity As organizations undertake large-scale digital transformation..." That's also about role. Could be part of About the role.
Then "Your Key Responsibilities As a Senior Consultant..." That's responsibilities.
Then "Skills And Attributes For Success ..." That's skills.
Then "To Qualify for the Role, You Must Have ..." That's qualifications/requirements.
Then "Ideally, You'll Also Have ..." That's also qualifications or preferred qualifications.
Then "What We Look For" maybe also skills or about role.
Then "What We Offer You At EY..." includes benefits and pay.
Pay details: salary ranges per location. So we need a Pay section with that info.
Benefits: medical and dental coverage, pension and 401(k) plans, wide range of paid time off options.
Schedule? Not mentioned. No schedule info. So we should not create Schedule section.
We also have location: "Anywhere in Country". Could be included in About the role or maybe as a short p.
We must not include boilerplate like EEO etc. Remove all that at end.
We must preserve all substantive info; not invent or summarize away detail. So we need to keep details like specific frameworks, percentages, travel 25-50%, etc.
We need to use - for any list of duties/requirements/benefits. So responsibilities list should be
. Skills list maybe also . Qualifications list maybe . Benefits list . Pay maybe just with salary ranges.
We need to avoid creating sections with filler. So we will include sections: About the role, Responsibilities, Skills, Qualifications, Benefits, Pay. Possibly also "Preferred Qualifications" but we can merge into Qualifications.
We must not repeat job title as heading.
Let's craft.
First, About the role: combine location and intro paragraphs.
Content: "Location: Anywhere in Country At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. The Opportunity As organizations undertake large-scale digital transformation, cloud migration, and technology modernization initiatives, the need for robust, scalable security architecture has never been greater. Security architecture decisions made today define an organization's risk posture for years to come—shaping how data is protected, how systems are connected, and how threats are detected and contained. As a Senior Consultant within EY's Cyber practice focused on Enterprise Security Architecture, you will work with clients to assess existing security architectures, design future-state security frameworks, and develop practical roadmaps that align security capabilities with enterprise strategy. This role offers the opportunity to engage in technically hands-on architecture work alongside strategic advisory engagements across diverse industries."
We can keep that as prose
.
Responsibilities: list bullet points from "Your Key Responsibilities". Let's extract each sentence as bullet.
- Evaluate existing security architectures, identify gaps and risks across network, cloud, application, data, and identity domains, and develop actionable recommendations grounded in industry frameworks and leading practices.
- Design and document future-state security architectures, reference models, and security patterns that address client-specific risk profiles and business objectives, and support clients in defining technology roadmaps that guide security investment and capability development.
- Contribute to the development of enterprise security architecture standards, policies, and governance frameworks that embed security requirements into technology and business change programs.
- Support clients in applying Zero Trust principles, securing hybrid and multi-cloud environments, and aligning architecture decisions to established frameworks such as SABSA, TOGAF, and NIST.
- Prepare client deliverables, architecture documentation, and executive-level presentations that communicate complex technical concepts to both technical and non-technical audiences.
- Collaborate with multidisciplinary teams to deliver high-quality work products, support project planning and management activities, mentor junior team members, and contribute to business development initiatives, thought leadership, and practice-building efforts within EY's Cyber practice.
We could also include "play an active and technically engaged role in delivering security architecture assessments, design engagements, and transformation initiatives while collaborating closely with clients and EY engagement teams." That's first sentence. Let's include as bullet.
Now Skills: from "Skills And Attributes For Success". That's a long paragraph with many attributes separated by periods. We'll split into bullet points.
List:
- Strong understanding of enterprise security architecture principles, patterns, and frameworks, with the ability to design solutions across network, cloud, application, data, identity, and endpoint security domains.
- Hands-on experience conducting security architecture assessments, threat modeling, and architecture risk analysis across complex enterprise environments.
- Ability to design and document security reference architectures, technology blueprints, and security patterns that align to business objectives and risk appetite.
- Experience applying Zero Trust architecture principles and translating them into practical, implementable security designs.
- Knowledge of cloud security architecture across major cloud platforms (AWS, Azure, GCP), including hybrid and multi-cloud environments.
- Familiarity with enterprise architecture frameworks such as SABSA, TOGAF, or Zachman as applied to security architecture engagements.
- Strong critical thinking, analytical, and problem-solving skills applied to complex security architecture challenges.
- Ability to communicate technical architecture concepts effectively to both engineering teams and executive stakeholders.
- Experience developing architecture documentation, executive presentations, and client-facing deliverables.
- Strong verbal and written communication skills.
- Ability to manage competing priorities in a fast-paced consulting environment.
- Strong attention to detail and commitment to high-quality client service.
- Ability to build relationships and collaborate effectively across multidisciplinary teams and client organizations.
- Demonstrated initiative, adaptability, and a commitment to continuous learning across an evolving technology and threat landscape.
Now Qualifications: from "To Qualify for the Role, You Must Have". Also "Ideally, You'll Also Have". We'll combine.
Must have:
- A bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, and approximately 3–5 years of relevant experience; or a graduate degree and 2–4 years of relevant experience.
- Experience in one or more of the following areas:
* Enterprise security architecture assessments and future-state architecture design
* Network security architecture, including segmentation, secure access, and perimeter design
* Cloud security architecture across AWS, Azure, or GCP, including IaaS, PaaS, and SaaS security
* Identity and access management architecture, including Zero Trust and privileged access design
* Application security architecture, secure SDLC, and DevSecOps integration
* Data protection architecture, including encryption, data classification, and data loss prevention
* Security architecture governance, standards development, and architecture review processes
* Knowledge of cybersecurity frameworks and standards, including NIST CSF, NIST 800-53, ISO 27001/27002, CIS Controls, and SABSA.
* Experience conducting security architecture reviews, threat modeling, and risk assessments in complex enterprise environments.
* Strong Microsoft PowerPoint, Excel, and Word skills.
* Willingness to travel based on client and business needs; travel estimated at 25–50%
Ideally also have:
- Professional certifications such as CISSP, CCSP, SABSA Chartered Architect (SCF/SCM), TOGAF, or other relevant security architecture credentials.
- Hands-on experience with security architecture tooling, including architecture modeling platforms, threat modeling tools, and cloud-native security services.
- Experience designing and implementing Zero Trust architectures, including microsegmentation, identity-centric access, and continuous verification models.
- Knowledge of security technology domains including SIEM, SOAR, EDR/XDR, PAM, IAM, CNAPP, and CASB, with the ability to assess their architectural fit within enterprise environments.
- Exposure to regulatory and compliance requirements—such as HIPAA, PCI DSS, FISMA, GDPR, or NYDFS—and their implications for security architecture decisions.
- Experience facilitating client workshops, technical design sessions, and architecture review board engagements.
- Background in software development, infrastructure engineering, or network engineering that informs deep technical architecture credibility.
- Experience within a consulting, professional services, or advisory environment.
- Knowledge of regulated industries such as financial services, healthcare, life sciences, government, or critical infrastructure.
We can put these as bullet lists under Qualifications.
Now Benefits: from "What We Offer You At EY...": "At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options."
We can make bullet list:
- Professional growth, personal fulfillment and an inclusive culture
- Medical and dental coverage
- Pension and 401(k) plans
- Wide range of paid time off options
We could also include "Learn more at ey.com/us/careers" but that's a link; maybe keep as prose.
Now Pay: salary ranges.
We need to include the salary range details exactly.
"The salary range for this job is: New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $125,800 to $209,700 Bay Area California offices – $131,100 to $218,500 All other offices locations in the US, including Sacramento – $104,800 to $192,200 Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography."
We'll put that as a
.
Now we must not include sections like Schedule (no info). Also we should not include "About the role" if it's too generic? It's okay.
We must not repeat job title as heading. Not needed.
We must not include boilerplate like EEO etc. Remove all that at end.
Now output HTML fragment.
Structure:
About the role
...
Responsibilities
- ...
...
Skills
...
Qualifications
...
Benefits
...
Pay
...
Make sure no extra whitespace? It's fine.
Let's craft the HTML.
Check for any repeated content: ensure we didn't miss any substantive info like "Location: Anywhere in Country". We included that in About the role.
Check that we didn't include "Learn more at ey.com/us/careers" maybe we can keep as a sentence in Benefits paragraph.
We could add a under Benefits: "Learn more at ey.com/us/careers". But it's not a list; we can include as a
after the list.
But the instruction: Use
- for any list of duties/requirements/benefits, and
for prose. So benefits list is a list; we can have a
for the "Learn more..." sentence.
Thus Benefits section:
- . Skills list maybe also
- ... ...
- for any list of duties/requirements/benefits, and
for prose. So benefits list is a list; we can have a
for the "Learn more..." sentence. Thus Benefits section:
- . Qualifications list maybe
- . Benefits list
- . Pay maybe just
with salary ranges. We need to avoid creating sections with filler. So we will include sections: About the role, Responsibilities, Skills, Qualifications, Benefits, Pay. Possibly also "Preferred Qualifications" but we can merge into Qualifications. We must not repeat job title as heading. Let's craft. First, About the role: combine location and intro paragraphs. Content: "Location: Anywhere in Country At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. The Opportunity As organizations undertake large-scale digital transformation, cloud migration, and technology modernization initiatives, the need for robust, scalable security architecture has never been greater. Security architecture decisions made today define an organization's risk posture for years to come—shaping how data is protected, how systems are connected, and how threats are detected and contained. As a Senior Consultant within EY's Cyber practice focused on Enterprise Security Architecture, you will work with clients to assess existing security architectures, design future-state security frameworks, and develop practical roadmaps that align security capabilities with enterprise strategy. This role offers the opportunity to engage in technically hands-on architecture work alongside strategic advisory engagements across diverse industries." We can keep that as prose
. Responsibilities: list bullet points from "Your Key Responsibilities". Let's extract each sentence as bullet. - Evaluate existing security architectures, identify gaps and risks across network, cloud, application, data, and identity domains, and develop actionable recommendations grounded in industry frameworks and leading practices. - Design and document future-state security architectures, reference models, and security patterns that address client-specific risk profiles and business objectives, and support clients in defining technology roadmaps that guide security investment and capability development. - Contribute to the development of enterprise security architecture standards, policies, and governance frameworks that embed security requirements into technology and business change programs. - Support clients in applying Zero Trust principles, securing hybrid and multi-cloud environments, and aligning architecture decisions to established frameworks such as SABSA, TOGAF, and NIST. - Prepare client deliverables, architecture documentation, and executive-level presentations that communicate complex technical concepts to both technical and non-technical audiences. - Collaborate with multidisciplinary teams to deliver high-quality work products, support project planning and management activities, mentor junior team members, and contribute to business development initiatives, thought leadership, and practice-building efforts within EY's Cyber practice. We could also include "play an active and technically engaged role in delivering security architecture assessments, design engagements, and transformation initiatives while collaborating closely with clients and EY engagement teams." That's first sentence. Let's include as bullet. Now Skills: from "Skills And Attributes For Success". That's a long paragraph with many attributes separated by periods. We'll split into bullet points. List: - Strong understanding of enterprise security architecture principles, patterns, and frameworks, with the ability to design solutions across network, cloud, application, data, identity, and endpoint security domains. - Hands-on experience conducting security architecture assessments, threat modeling, and architecture risk analysis across complex enterprise environments. - Ability to design and document security reference architectures, technology blueprints, and security patterns that align to business objectives and risk appetite. - Experience applying Zero Trust architecture principles and translating them into practical, implementable security designs. - Knowledge of cloud security architecture across major cloud platforms (AWS, Azure, GCP), including hybrid and multi-cloud environments. - Familiarity with enterprise architecture frameworks such as SABSA, TOGAF, or Zachman as applied to security architecture engagements. - Strong critical thinking, analytical, and problem-solving skills applied to complex security architecture challenges. - Ability to communicate technical architecture concepts effectively to both engineering teams and executive stakeholders. - Experience developing architecture documentation, executive presentations, and client-facing deliverables. - Strong verbal and written communication skills. - Ability to manage competing priorities in a fast-paced consulting environment. - Strong attention to detail and commitment to high-quality client service. - Ability to build relationships and collaborate effectively across multidisciplinary teams and client organizations. - Demonstrated initiative, adaptability, and a commitment to continuous learning across an evolving technology and threat landscape. Now Qualifications: from "To Qualify for the Role, You Must Have". Also "Ideally, You'll Also Have". We'll combine. Must have: - A bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, and approximately 3–5 years of relevant experience; or a graduate degree and 2–4 years of relevant experience. - Experience in one or more of the following areas: * Enterprise security architecture assessments and future-state architecture design * Network security architecture, including segmentation, secure access, and perimeter design * Cloud security architecture across AWS, Azure, or GCP, including IaaS, PaaS, and SaaS security * Identity and access management architecture, including Zero Trust and privileged access design * Application security architecture, secure SDLC, and DevSecOps integration * Data protection architecture, including encryption, data classification, and data loss prevention * Security architecture governance, standards development, and architecture review processes * Knowledge of cybersecurity frameworks and standards, including NIST CSF, NIST 800-53, ISO 27001/27002, CIS Controls, and SABSA. * Experience conducting security architecture reviews, threat modeling, and risk assessments in complex enterprise environments. * Strong Microsoft PowerPoint, Excel, and Word skills. * Willingness to travel based on client and business needs; travel estimated at 25–50% Ideally also have: - Professional certifications such as CISSP, CCSP, SABSA Chartered Architect (SCF/SCM), TOGAF, or other relevant security architecture credentials. - Hands-on experience with security architecture tooling, including architecture modeling platforms, threat modeling tools, and cloud-native security services. - Experience designing and implementing Zero Trust architectures, including microsegmentation, identity-centric access, and continuous verification models. - Knowledge of security technology domains including SIEM, SOAR, EDR/XDR, PAM, IAM, CNAPP, and CASB, with the ability to assess their architectural fit within enterprise environments. - Exposure to regulatory and compliance requirements—such as HIPAA, PCI DSS, FISMA, GDPR, or NYDFS—and their implications for security architecture decisions. - Experience facilitating client workshops, technical design sessions, and architecture review board engagements. - Background in software development, infrastructure engineering, or network engineering that informs deep technical architecture credibility. - Experience within a consulting, professional services, or advisory environment. - Knowledge of regulated industries such as financial services, healthcare, life sciences, government, or critical infrastructure. We can put these as bullet lists under Qualifications. Now Benefits: from "What We Offer You At EY...": "At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options." We can make bullet list: - Professional growth, personal fulfillment and an inclusive culture - Medical and dental coverage - Pension and 401(k) plans - Wide range of paid time off options We could also include "Learn more at ey.com/us/careers" but that's a link; maybe keep as prose. Now Pay: salary ranges. We need to include the salary range details exactly. "The salary range for this job is: New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $125,800 to $209,700 Bay Area California offices – $131,100 to $218,500 All other offices locations in the US, including Sacramento – $104,800 to $192,200 Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography." We'll put that as a
. Now we must not include sections like Schedule (no info). Also we should not include "About the role" if it's too generic? It's okay. We must not repeat job title as heading. Not needed. We must not include boilerplate like EEO etc. Remove all that at end. Now output HTML fragment. Structure:
About the role
...
Responsibilities
Skills
- ...
Qualifications
- ...
Benefits
- ...
Pay
...
Make sure no extra whitespace? It's fine. Let's craft the HTML. Check for any repeated content: ensure we didn't miss any substantive info like "Location: Anywhere in Country". We included that in About the role. Check that we didn't include "Learn more at ey.com/us/careers" maybe we can keep as a sentence in Benefits paragraph. We could add aunder Benefits: "Learn more at ey.com/us/careers". But it's not a list; we can include as a
after the list. But the instruction: Use