Senior InfoSec Consultant

About the role

The EY Global Information Security team is looking for a Senior InfoSec Consultant to lead edge technologies in support of EY’s growth strategy. This role involves designing, developing, and implementing security controls for market-leading regional and global systems primarily using Cloud technologies.

Responsibilities

• Design, implement, and operate security controls for Cloud-based systems.
• Develop and enforce security protocols for blockchain technologies and applications.
• Work with agile and DevOps methodologies to support digital-enabled services.
• Support the integration of security technologies into business solution architectures.
• Implement security measures in a Microsoft Azure environment and manage global systems using PaaS and SaaS architectures.
• Collaborate with stakeholders from developers to architects to business leaders and clients.

Requirements

• Significant working security experience and knowledge in various IT system architecture and Cloud technology.
• Experience with AI security technologies, especially Gen AI and rapid-growing LLMs.
• Experiences with designing and enforcing security protocols for blockchain technologies.
• Knowledge of ISO27001/2, OWASP, and related regional security standards.
• Advanced degree in Computer Science or a related discipline; or equivalent work experience.
• CISSP, CCSP, CISM, or similar security certifications preferred.

Skills and attributes for success

• Hands-on experience with developing and implementing AI security technologies.
• Experiences with designing and enforcing security protocols for blockchain technologies.
• Experience with Agile & DevOps Methodologies.
• Technical understanding of virtualization, cloud infrastructure, and public cloud offerings.
• Experience with application-level access and entitlement management, data tenancy and isolation, encryption, and logging.
• Working familiarity with REST API and microservices architecture.
• Experience with identity & access management, intrusion detection and prevention, security monitoring, and data encryption solutions.
• Experience with Open Source web technologies and programming languages.
• Significant experience in implementing security in a Microsoft Azure environment.
• Direct knowledge of IT system architecture concepts and Cloud technology.
• Strong communication skills and ability to work with stakeholders.

Qualifications (Ideally)

• Operational Security experience.
• Knowledge of information security standards such as ISO 27001/27002, CSA and CIS Controls.
• Cloud security certifications such as AZ-500 Azure Security Engineer.
• Product Management experience.

Pay

The base salary range for this job in all geographic locations in the US is $128,100 to $239,600. The base salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is $153,800 to $272,300. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography.