Cyber - Enterprise Security Architect - Senior - Consulting
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). We need to include sections only when posting has real, specific content. We have content for responsibilities, skills/attributes, qualifications, maybe benefits/pay, schedule? There's travel estimate 25-50% (that's schedule? maybe schedule not given). Pay: salary ranges given. Benefits: mention medical/dental, pension/401k, paid time off. So we can have Benefits and Pay sections.
We should not repeat job title as heading. No Job ID. Remove boilerplate: cookie/navigation/legal/EEO etc. Remove duplicated lines, application instructions. Also remove "What We Look For" maybe part of responsibilities? Could be part of "About the role"? But we can treat as part of responsibilities or a separate "What We Look For" not in allowed headings; better to incorporate into responsibilities or skills. We'll keep only sections: About the role (intro), Responsibilities, Skills And Attributes (maybe Skills), Qualifications (To Qualify for the Role), Benefits, Pay. Possibly also "Ideally, You'll Also Have" could be part of Skills or Qualifications; but we can incorporate into Skills.
We need to preserve all substantive information; not invent or summarize away detail. Must not omit details. So we need to include all details from the posting, but we can rephrase? Must preserve all substantive information; we can keep same sentences but format into HTML.
We need to use - for any list of duties/requirements/benefits. So responsibilities list should be
- . Skills list also
- . Qualifications list also
- . Benefits list also
- . Pay maybe just
with salary ranges.
We must not create sections with filler like "commensurate with experience". We have actual pay ranges.
We need to output only HTML fragment, no /, no markdown fences.
Let's extract content.
Intro: "Location: Anywhere in Country At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. The Opportunity As organizations undertake large-scale digital transformation, cloud migration, and technology modernization initiatives, the need for robust, scalable security architecture has never been greater. Security architecture decisions made today define an organization's risk posture for years to come—shaping how data is protected, how systems are connected, and how threats are detected and contained. As a Senior Consultant within EY's Cyber practice focused on Enterprise Security Architecture, you will work with clients to assess existing security architectures, design future-state security frameworks, and develop practical roadmaps that align security capabilities with enterprise strategy. This role offers the opportunity to engage in technically hands-on architecture work alongside strategic advisory engagements across diverse industries."
We can put that under
About the role
with containing that text.
Responsibilities: The section "Your Key Responsibilities" then bullet-like sentences. We'll convert each sentence into
- . Let's list them:
- You will play an active and technically engaged role in delivering security architecture assessments, design engagements, and transformation initiatives while collaborating closely with clients and EY engagement teams.
- You will evaluate existing security architectures, identify gaps and risks across network, cloud, application, data, and identity domains, and develop actionable recommendations grounded in industry frameworks and leading practices.
- You will design and document future-state security architectures, reference models, and security patterns that address client-specific risk profiles and business objectives, and support clients in defining technology roadmaps that guide security investment and capability development.
- In addition, as a Senior Consultant, you will contribute to the development of enterprise security architecture standards, policies, and governance frameworks that embed security requirements into technology and business change programs.
- You will support clients in applying Zero Trust principles, securing hybrid and multi-cloud environments, and aligning architecture decisions to established frameworks such as SABSA, TOGAF, and NIST.
- You will prepare client deliverables, architecture documentation, and executive-level presentations that communicate complex technical concepts to both technical and non-technical audiences.
- You will collaborate with multidisciplinary teams to deliver high-quality work products, support project planning and management activities, mentor junior team members, and contribute to business development initiatives, thought leadership, and practice-building efforts within EY's Cyber practice.
We'll put under
Responsibilities
with - each.
Skills And Attributes: The section "Skills And Attributes For Success". It's a long paragraph with many attributes separated by periods. We need to split into list items. Let's parse:
- Strong understanding of enterprise security architecture principles, patterns, and frameworks, with the ability to design solutions across network, cloud, application, data, identity, and endpoint security domains.
- Hands-on experience conducting security architecture assessments, threat modeling, and architecture risk analysis across complex enterprise environments.
- Ability to design and document security reference architectures, technology blueprints, and security patterns that align to business objectives and risk appetite.
- Experience applying Zero Trust architecture principles and translating them into practical, implementable security designs.
- Knowledge of cloud security architecture across major cloud platforms (AWS, Azure, GCP), including hybrid and multi-cloud environments.
- Familiarity with enterprise architecture frameworks such as SABSA, TOGAF, or Zachman as applied to security architecture engagements.
- Strong critical thinking, analytical, and problem-solving skills applied to complex security architecture challenges.
- Ability to communicate technical architecture concepts effectively to both engineering teams and executive stakeholders.
- Experience developing architecture documentation, executive presentations, and client-facing deliverables.
- Strong verbal and written communication skills.
- Ability to manage competing priorities in a fast-paced consulting environment.
- Strong attention to detail and commitment to high-quality client service.
- Ability to build relationships and collaborate effectively across multidisciplinary teams and client organizations.
- Demonstrated initiative, adaptability, and a commitment to continuous learning across an evolving technology and threat landscape.
We'll put under
Skills
(or Skills And Attributes). Use heading Skills.
Qualifications: "To Qualify for the Role, You Must Have" then bullet-like sentences. Let's extract:
- A bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, and approximately 3–5 years of relevant experience; or a graduate degree and 2–4 years of relevant experience.
- Experience in one or more of the following areas:
* Enterprise security architecture assessments and future-state architecture design
* Network security architecture, including segmentation, secure access, and perimeter design
* Cloud security architecture across AWS, Azure, or GCP, including IaaS, PaaS, and SaaS security
* Identity and access management architecture, including Zero Trust and privileged access design
* Application security architecture, secure SDLC, and DevSecOps integration
* Data protection architecture, including encryption, data classification, and data loss prevention
* Security architecture governance, standards development, and architecture review processes
* Knowledge of cybersecurity frameworks and standards, including NIST CSF, NIST 800-53, ISO 27001/27002, CIS Controls, and SABSA.
* Experience conducting security architecture reviews, threat modeling, and risk assessments in complex enterprise environments.
* Strong Microsoft PowerPoint, Excel, and Word skills.
* Willingness to travel based on client and business needs; travel estimated at 25–50%
We need to keep the sub-bullets as list items maybe nested? The instruction: use - for any list of duties/requirements/benefits. So we can have top-level
with each requirement as - . For the "Experience in one or more of the following areas:" we could make a nested
. That's okay.
We'll produce:
Qualifications
- A bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, and approximately 3–5 years of relevant experience; or a graduate degree and 2–4 years of relevant experience.
- Experience in one or more of the following areas:
- Enterprise security architecture assessments and future-state architecture design
- Network security architecture, including segmentation, secure access, and perimeter design
- Cloud security architecture across AWS, Azure, or GCP, including IaaS, PaaS, and SaaS security
- Identity and access management architecture, including Zero Trust and privileged access design
- Application security architecture, secure SDLC, and DevSecOps integration
- Data protection architecture, including encryption, data classification, and data loss prevention
- Security architecture governance, standards development, and architecture review processes
- Knowledge of cybersecurity frameworks and standards, including NIST CSF, NIST 800-53, ISO 27001/27002, CIS Controls, and SABSA.
- Experience conducting security architecture reviews, threat modeling, and risk assessments in complex enterprise environments.
- Strong Microsoft PowerPoint, Excel, and Word skills.
- Willingness to travel based on client and business needs; travel estimated at 25–50%
But note that the "Willingness to travel..." could be separate top-level item; but it's part of the list after the areas. We'll keep as sub-item.
Now Benefits: "In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options." Also earlier: "Learn more at ey.com/us/careers." That's not benefit. We'll create Benefits section with list items:
- medical and dental coverage
- pension and 401(k) plans
- wide range of paid time off options
We'll put under Benefits
with - .
Pay: The salary ranges: "The salary range for this job is: New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $125,800 to $209,700 Bay Area California offices – $131,100 to $218,500 All other offices locations in the US, including Sacramento – $104,800 to $192,200 Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography."
We'll put under
Pay
with containing that text.
Schedule: Not given explicitly besides travel estimate; but schedule not given. So we omit Schedule section.
We must not include boilerplate like "What We Look For", "What We Offer You", "Are you ready to shape your future with confidence? Apply today." etc. Also remove EEO etc.
We need to ensure we preserve all substantive information: Did we miss any? Let's review original text for any other substantive info not covered.
Original includes:
- Location: Anywhere in Country (we included in About the role? We didn't explicitly mention location; we could include location in About the role paragraph. The intro says "Location: Anywhere in Country". We should preserve that. Add it to About the role paragraph.
- The Opportunity paragraph we included.
- "Your Key Responsibilities" we covered.
- "Skills And Attributes For Success" we covered.
- "To Qualify for the Role, You Must Have" we covered.
- "Ideally, You'll Also Have" we
- . Skills list also
- . Qualifications list also
- . Benefits list also
- . Pay maybe just
with salary ranges. We must not create sections with filler like "commensurate with experience". We have actual pay ranges. We need to output only HTML fragment, no /, no markdown fences. Let's extract content. Intro: "Location: Anywhere in Country At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. The Opportunity As organizations undertake large-scale digital transformation, cloud migration, and technology modernization initiatives, the need for robust, scalable security architecture has never been greater. Security architecture decisions made today define an organization's risk posture for years to come—shaping how data is protected, how systems are connected, and how threats are detected and contained. As a Senior Consultant within EY's Cyber practice focused on Enterprise Security Architecture, you will work with clients to assess existing security architectures, design future-state security frameworks, and develop practical roadmaps that align security capabilities with enterprise strategy. This role offers the opportunity to engage in technically hands-on architecture work alongside strategic advisory engagements across diverse industries." We can put that under
About the role
withcontaining that text. Responsibilities: The section "Your Key Responsibilities" then bullet-like sentences. We'll convert each sentence into
- . Let's list them:
- You will play an active and technically engaged role in delivering security architecture assessments, design engagements, and transformation initiatives while collaborating closely with clients and EY engagement teams.
- You will evaluate existing security architectures, identify gaps and risks across network, cloud, application, data, and identity domains, and develop actionable recommendations grounded in industry frameworks and leading practices.
- You will design and document future-state security architectures, reference models, and security patterns that address client-specific risk profiles and business objectives, and support clients in defining technology roadmaps that guide security investment and capability development.
- In addition, as a Senior Consultant, you will contribute to the development of enterprise security architecture standards, policies, and governance frameworks that embed security requirements into technology and business change programs.
- You will support clients in applying Zero Trust principles, securing hybrid and multi-cloud environments, and aligning architecture decisions to established frameworks such as SABSA, TOGAF, and NIST.
- You will prepare client deliverables, architecture documentation, and executive-level presentations that communicate complex technical concepts to both technical and non-technical audiences.
- You will collaborate with multidisciplinary teams to deliver high-quality work products, support project planning and management activities, mentor junior team members, and contribute to business development initiatives, thought leadership, and practice-building efforts within EY's Cyber practice.
We'll put under
Responsibilities
with- each.
Skills And Attributes: The section "Skills And Attributes For Success". It's a long paragraph with many attributes separated by periods. We need to split into list items. Let's parse:
- Strong understanding of enterprise security architecture principles, patterns, and frameworks, with the ability to design solutions across network, cloud, application, data, identity, and endpoint security domains.
- Hands-on experience conducting security architecture assessments, threat modeling, and architecture risk analysis across complex enterprise environments.
- Ability to design and document security reference architectures, technology blueprints, and security patterns that align to business objectives and risk appetite.
- Experience applying Zero Trust architecture principles and translating them into practical, implementable security designs.
- Knowledge of cloud security architecture across major cloud platforms (AWS, Azure, GCP), including hybrid and multi-cloud environments.
- Familiarity with enterprise architecture frameworks such as SABSA, TOGAF, or Zachman as applied to security architecture engagements.
- Strong critical thinking, analytical, and problem-solving skills applied to complex security architecture challenges.
- Ability to communicate technical architecture concepts effectively to both engineering teams and executive stakeholders.
- Experience developing architecture documentation, executive presentations, and client-facing deliverables.
- Strong verbal and written communication skills.
- Ability to manage competing priorities in a fast-paced consulting environment.
- Strong attention to detail and commitment to high-quality client service.
- Ability to build relationships and collaborate effectively across multidisciplinary teams and client organizations.
- Demonstrated initiative, adaptability, and a commitment to continuous learning across an evolving technology and threat landscape.
We'll put under
Skills
(or Skills And Attributes). Use heading Skills. Qualifications: "To Qualify for the Role, You Must Have" then bullet-like sentences. Let's extract: - A bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, and approximately 3–5 years of relevant experience; or a graduate degree and 2–4 years of relevant experience. - Experience in one or more of the following areas: * Enterprise security architecture assessments and future-state architecture design * Network security architecture, including segmentation, secure access, and perimeter design * Cloud security architecture across AWS, Azure, or GCP, including IaaS, PaaS, and SaaS security * Identity and access management architecture, including Zero Trust and privileged access design * Application security architecture, secure SDLC, and DevSecOps integration * Data protection architecture, including encryption, data classification, and data loss prevention * Security architecture governance, standards development, and architecture review processes * Knowledge of cybersecurity frameworks and standards, including NIST CSF, NIST 800-53, ISO 27001/27002, CIS Controls, and SABSA. * Experience conducting security architecture reviews, threat modeling, and risk assessments in complex enterprise environments. * Strong Microsoft PowerPoint, Excel, and Word skills. * Willingness to travel based on client and business needs; travel estimated at 25–50% We need to keep the sub-bullets as list items maybe nested? The instruction: use- for any list of duties/requirements/benefits. So we can have top-level
- with each requirement as
- . For the "Experience in one or more of the following areas:" we could make a nested
- . That's okay.
We'll produce:
- A bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, and approximately 3–5 years of relevant experience; or a graduate degree and 2–4 years of relevant experience.
- Experience in one or more of the following areas:
- Enterprise security architecture assessments and future-state architecture design
- Network security architecture, including segmentation, secure access, and perimeter design
- Cloud security architecture across AWS, Azure, or GCP, including IaaS, PaaS, and SaaS security
- Identity and access management architecture, including Zero Trust and privileged access design
- Application security architecture, secure SDLC, and DevSecOps integration
- Data protection architecture, including encryption, data classification, and data loss prevention
- Security architecture governance, standards development, and architecture review processes
- Knowledge of cybersecurity frameworks and standards, including NIST CSF, NIST 800-53, ISO 27001/27002, CIS Controls, and SABSA.
- Experience conducting security architecture reviews, threat modeling, and risk assessments in complex enterprise environments.
- Strong Microsoft PowerPoint, Excel, and Word skills.
- Willingness to travel based on client and business needs; travel estimated at 25–50%
- .
Pay: The salary ranges: "The salary range for this job is: New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $125,800 to $209,700 Bay Area California offices – $131,100 to $218,500 All other offices locations in the US, including Sacramento – $104,800 to $192,200 Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography."
We'll put under
Pay
withcontaining that text. Schedule: Not given explicitly besides travel estimate; but schedule not given. So we omit Schedule section. We must not include boilerplate like "What We Look For", "What We Offer You", "Are you ready to shape your future with confidence? Apply today." etc. Also remove EEO etc. We need to ensure we preserve all substantive information: Did we miss any? Let's review original text for any other substantive info not covered. Original includes: - Location: Anywhere in Country (we included in About the role? We didn't explicitly mention location; we could include location in About the role paragraph. The intro says "Location: Anywhere in Country". We should preserve that. Add it to About the role paragraph. - The Opportunity paragraph we included. - "Your Key Responsibilities" we covered. - "Skills And Attributes For Success" we covered. - "To Qualify for the Role, You Must Have" we covered. - "Ideally, You'll Also Have" we
Qualifications
Benefits
with
- . For the "Experience in one or more of the following areas:" we could make a nested
- for any list of duties/requirements/benefits. So we can have top-level
- each.
Skills And Attributes: The section "Skills And Attributes For Success". It's a long paragraph with many attributes separated by periods. We need to split into list items. Let's parse:
- Strong understanding of enterprise security architecture principles, patterns, and frameworks, with the ability to design solutions across network, cloud, application, data, identity, and endpoint security domains.
- Hands-on experience conducting security architecture assessments, threat modeling, and architecture risk analysis across complex enterprise environments.
- Ability to design and document security reference architectures, technology blueprints, and security patterns that align to business objectives and risk appetite.
- Experience applying Zero Trust architecture principles and translating them into practical, implementable security designs.
- Knowledge of cloud security architecture across major cloud platforms (AWS, Azure, GCP), including hybrid and multi-cloud environments.
- Familiarity with enterprise architecture frameworks such as SABSA, TOGAF, or Zachman as applied to security architecture engagements.
- Strong critical thinking, analytical, and problem-solving skills applied to complex security architecture challenges.
- Ability to communicate technical architecture concepts effectively to both engineering teams and executive stakeholders.
- Experience developing architecture documentation, executive presentations, and client-facing deliverables.
- Strong verbal and written communication skills.
- Ability to manage competing priorities in a fast-paced consulting environment.
- Strong attention to detail and commitment to high-quality client service.
- Ability to build relationships and collaborate effectively across multidisciplinary teams and client organizations.
- Demonstrated initiative, adaptability, and a commitment to continuous learning across an evolving technology and threat landscape.
We'll put under
- . Pay maybe just
- . Benefits list also
- . Qualifications list also