Cybersecurity - Data Protection and Privacy - Senior - Consulting - Location OPEN
for sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. Must not repeat job title. Must not include Job ID etc. Must preserve all substantive info, no invented or summarizing away detail. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, application instructions. Also remove "Apply today", "To make the most of your application experience..." etc. Also remove EY values statements etc. Keep substantive content: location, description, responsibilities, skills, qualifications, pay, benefits, schedule? There's schedule info: travel 60-80% maybe considered schedule? It's travel requirement, not schedule. There's no explicit schedule like full-time/part-time. So we may not include Schedule section unless there is explicit schedule info. There's "Willingness to travel to meet client needs; travel is estimated at 60-80%." That's not schedule but travel requirement. Could be placed under Requirements or Qualifications. We'll include under Requirements maybe. We need sections: About the role (intro paragraph), Responsibilities (list), Requirements (maybe combine qualifications and skills?), Qualifications (education/experience), Skills (list), Benefits (list), Pay (salary ranges). Ensure we don't create sections with filler. Let's extract content: Location: "Anywhere in Country" (maybe not needed but could be in About the role). The posting: "Location: Anywhere in Country". We'll include that in About the role paragraph. About the role: The first paragraph after location: "At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. Cyber threats, social media, massive data storage, privacy requirements and continuity of the business as usual require heavy information security measures. As an information security specialist, you will lead the implementation of security solutions for our clients and support the clients in their desire to protect the business. You will belong to an international connected team of specialists helping our clients with their most complex information security needs and contributing toward their business resilience. You will be working with our Advanced Security Centers to access the most sophisticated tools available to fight against cybercrime. We will support you with career-long training and coaching to develop your skills. As EY is a global leading service provider in this space, you will be working with the best of the best in a collaborative environment. So, whenever you join, however long you stay, the exceptional EY experience lasts a lifetime." Then "The opportunity We currently have a career opportunity for a Senior Consultant in our Cybersecruity practice for Data Protection & Privacy with demonstrated experience in developing data protection strategies and implementing solutions to provide data security, privacy and integrity." That's also about role. We can combine into About the role paragraph(s). Use
for prose. Responsibilities: Under "Your Key Responsibilities As a Senior Consultant in the Data Protection & Privacy competency, you will help clients define technical and business requirements for data protection solutions as well as develop business processes and policies related to controlling access to data. This includes helping clients to identify, understand and protect their most critical data throughout the data lifecycle. Engagements range from identifying high value assets to developing data classification schemes, standards and guidelines and implementing processes and technologies to provide leading data protection capabilities. You and your team will implement and advise clients on multiple data protection products and solutions, including Enterprise data loss prevention Data discovery Data classification Digital rights management Cloud data loss prevention / cloud access security brokers Tokenization File and database encryption" We need to turn list of products into
- . The sentence includes list separated by spaces; we can split: Enterprise data loss prevention, Data discovery, Data classification, Digital rights management, Cloud data loss prevention / cloud access security brokers, Tokenization, File and database encryption.
We'll produce
- items.
Requirements: The posting includes "To qualify for the role you must have Bachelor's degree and approximately 2-3 years of related work experience; or a graduate degree and approximately 1-2 years of related work experience. Approximately 2-3 years of technical architecture experience integrating data protection software into clients' infrastructure and applications. Knowledge of general security concepts and methods such as vulnerability assessments, data classification, privacy assessments, incident response, security policy creation, enterprise security strategies, architectures and governance. Basic understanding of networking (TCP/IP, OSI model), operating system fundamentals (Windows, UNIX, mainframe), security technologies (firewalls, IDS/IPS, etc.) and application programming/scripting languages (C, Java, Perl, Shell). Demonstrated experience in three or more of the following areas:Data leakage/content monitoring and filtering Secure messaging/email encryption Mobile device security Disk, file, device, and database encryption Key management/Public Key Infrastructure (PKI) Data classification and privacy policies Digital Rights Management (DRM) Logging, monitoring, and security event management Secure information storage"
Also "What We Look For Basic understanding of regulatory requirements and compliance issues affecting clients related to privacy and data protection, such as PCI DSS, GLBA, Basel II, EU Data Protection Directive, International Cross Border, and U.S. State Data Privacy Laws. Technical architecture experience integrating data protection software into clients' infrastructure; network architecture design, implementation and administration. Working knowledge of operating systems, virtual machine envrionments, mainframe security packages, and relational database management systems. Willingness to travel to meet client needs; travel is estimated at 60-80%. Valid driver's license in the US and a valid passport required; willingness and ability to travel internationally."
These could be under Requirements or Qualifications. We need to decide sections: Qualifications (education/experience), Skills (technical skills), Requirements maybe overlapping. The instruction: Use headings for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can have both Requirements and Qualifications separate. We need to decide what goes where.
Qualifications likely education/experience: Bachelor's or graduate degree + years experience. Also maybe certifications? The "Ideally, you’ll also have The successful candidate must hold or be willing to pursue related professional certifications such as the CISSP, CISM, and/or CISA." That could be under Qualifications or Skills. We'll put under Qualifications as "Preferred certifications".
Requirements could be the technical knowledge and experience: knowledge of security concepts, networking, OS, programming, demonstrated experience in three or more areas, etc. Also regulatory understanding, travel, license.
Skills: "Skills And Attributes For Success Consistently deliver quality client services. Monitor progress, manage risk and ensure key stakeholders are kept informed about progress and expected outcomes. Stay abreast of current business and industry trends relevant to the client's business. Establish relationships with client personnel at appropriate levels.Demonstrate in-depth technical capabilities and professional knowledge. Demonstrate ability to assimilate to new knowledge. Possess good business acumen. Remain current on new developments in consulting services capabilities and industry knowledge"
That's a list of attributes; we can turn into
- .
Benefits: "In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options." Also earlier: "Learn more at ey.com/us/careers." That's not benefit. Also "We will support you with career-long training and coaching to develop your skills." That's more about role. Benefits: medical/dental, pension/401k, paid time off. Also maybe "career-long training and coaching" could be benefit but it's more about role. We'll stick to explicit benefits.
Pay: Salary ranges given.
Schedule: No explicit schedule; travel 60-80% maybe considered schedule but it's travel requirement. We'll not create Schedule section.
Now we must ensure we don't include boilerplate like EEO, values, etc. Remove all that.
We need to preserve all substantive information; not invent or summarize away detail. So we must keep all details from the sections we include. Must not omit any detail like specific technologies, etc. Must keep the list of areas for demonstrated experience, etc.
We must not repeat job title. Not include "Senior Consultant" as heading; but we can mention it in prose.
We must not put Job ID/requisition numbers as headings; none present.
We must not include duplicated lines.
Now produce HTML fragment.
Structure:
About the role
... (combined paragraphs)
Responsibilities
... maybe first sentence then
- for list of products.
We need to keep the prose about responsibilities before the list. So we can have a
- Enterprise data loss prevention
- Data discovery
- Data classification
- Digital rights management
- Cloud data loss prevention / cloud access security brokers
- Tokenization
- File and database encryption
- Data leakage/content monitoring and filtering
- Secure messaging/email encryption
- Mobile device security
- Disk, file, device, and database encryption
- Key management/Public Key Infrastructure (PKI)
- Data classification and privacy policies
- Digital Rights Management (DRM)
- Logging, monitoring, and security event management
- Secure information storage
containing the sentence up to "You and your team will implement and advise clients on multiple data protection products and solutions, including" then
- list.
Alternatively we can put the whole responsibilities in
and then
- after.
We'll do:
Responsibilities
As a Senior Consultant in the Data Protection & Privacy competency, you will help clients define technical and business requirements for data protection solutions as well as develop business processes and policies related to controlling access to data. This includes helping clients to identify, understand and protect their most critical data throughout the data lifecycle. Engagements range from identifying high value assets to developing data classification schemes, standards and guidelines and implementing processes and technologies to provide leading data protection capabilities. You and your team will implement and advise clients on multiple data protection products and solutions, including
Qualifications
To qualify for the role you must have a Bachelor's degree and approximately 2-3 years of related work experience; or a graduate degree and approximately 1-2 years of related work experience. Approximately 2-3 years of technical architecture experience integrating data protection software into clients' infrastructure and applications.
Ideally, you’ll also have the successful candidate hold or be willing to pursue related professional certifications such as the CISSP, CISM, and/or CISA.
But note the phrase "Ideally, you’ll also have The successful candidate must hold or be willing to pursue related professional certifications such as the CISSP, CISM, and/or CISA." We need to keep that exactly. We'll combine. Now Requirements:Requirements
Knowledge of general security concepts and methods such as vulnerability assessments, data classification, privacy assessments, incident response, security policy creation, enterprise security strategies, architectures and governance. Basic understanding of networking (TCP/IP, OSI model), operating system fundamentals (Windows, UNIX, mainframe), security technologies (firewalls, IDS/IPS, etc.) and application programming/scripting languages (C, Java, Perl, Shell). Demonstrated experience in three or more of the following areas:
- .
Benefits: "In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options." Also earlier: "Learn more at ey.com/us/careers." That's not benefit. Also "We will support you with career-long training and coaching to develop your skills." That's more about role. Benefits: medical/dental, pension/401k, paid time off. Also maybe "career-long training and coaching" could be benefit but it's more about role. We'll stick to explicit benefits.
Pay: Salary ranges given.
Schedule: No explicit schedule; travel 60-80% maybe considered schedule but it's travel requirement. We'll not create Schedule section.
Now we must ensure we don't include boilerplate like EEO, values, etc. Remove all that.
We need to preserve all substantive information; not invent or summarize away detail. So we must keep all details from the sections we include. Must not omit any detail like specific technologies, etc. Must keep the list of areas for demonstrated experience, etc.
We must not repeat job title. Not include "Senior Consultant" as heading; but we can mention it in prose.
We must not put Job ID/requisition numbers as headings; none present.
We must not include duplicated lines.
Now produce HTML fragment.
Structure:
- items.
Requirements: The posting includes "To qualify for the role you must have Bachelor's degree and approximately 2-3 years of related work experience; or a graduate degree and approximately 1-2 years of related work experience. Approximately 2-3 years of technical architecture experience integrating data protection software into clients' infrastructure and applications. Knowledge of general security concepts and methods such as vulnerability assessments, data classification, privacy assessments, incident response, security policy creation, enterprise security strategies, architectures and governance. Basic understanding of networking (TCP/IP, OSI model), operating system fundamentals (Windows, UNIX, mainframe), security technologies (firewalls, IDS/IPS, etc.) and application programming/scripting languages (C, Java, Perl, Shell). Demonstrated experience in three or more of the following areas:Data leakage/content monitoring and filtering Secure messaging/email encryption Mobile device security Disk, file, device, and database encryption Key management/Public Key Infrastructure (PKI) Data classification and privacy policies Digital Rights Management (DRM) Logging, monitoring, and security event management Secure information storage"
Also "What We Look For Basic understanding of regulatory requirements and compliance issues affecting clients related to privacy and data protection, such as PCI DSS, GLBA, Basel II, EU Data Protection Directive, International Cross Border, and U.S. State Data Privacy Laws. Technical architecture experience integrating data protection software into clients' infrastructure; network architecture design, implementation and administration. Working knowledge of operating systems, virtual machine envrionments, mainframe security packages, and relational database management systems. Willingness to travel to meet client needs; travel is estimated at 60-80%. Valid driver's license in the US and a valid passport required; willingness and ability to travel internationally."
These could be under Requirements or Qualifications. We need to decide sections: Qualifications (education/experience), Skills (technical skills), Requirements maybe overlapping. The instruction: Use headings for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can have both Requirements and Qualifications separate. We need to decide what goes where.
Qualifications likely education/experience: Bachelor's or graduate degree + years experience. Also maybe certifications? The "Ideally, you’ll also have The successful candidate must hold or be willing to pursue related professional certifications such as the CISSP, CISM, and/or CISA." That could be under Qualifications or Skills. We'll put under Qualifications as "Preferred certifications".
Requirements could be the technical knowledge and experience: knowledge of security concepts, networking, OS, programming, demonstrated experience in three or more areas, etc. Also regulatory understanding, travel, license.
Skills: "Skills And Attributes For Success Consistently deliver quality client services. Monitor progress, manage risk and ensure key stakeholders are kept informed about progress and expected outcomes. Stay abreast of current business and industry trends relevant to the client's business. Establish relationships with client personnel at appropriate levels.Demonstrate in-depth technical capabilities and professional knowledge. Demonstrate ability to assimilate to new knowledge. Possess good business acumen. Remain current on new developments in consulting services capabilities and industry knowledge"
That's a list of attributes; we can turn into