Senior InfoSec Consultant

About the role

The EY Global Information Security team is looking for a Senior InfoSec Consultant to lead the design, development, and implementation of security controls for market-leading regional and global systems based primarily on Cloud technologies. This role involves working closely with client engagement teams and technologists worldwide to support digitally-enabled services that leverage leading-edge technologies.

Responsibilities

• Design, implement, and access security controls for cloud-based systems using agile methodologies and CI/CD pipelines.
• Develop and enforce security protocols for blockchain technologies and applications.
• Work with developers, architects, and business leaders to ensure security is integrated into digital practices throughout business processes.
• Represent Security Consulting to advanced innovation teams to integrate the latest technology and thinking into the global technology team.
• Apply knowledge of IT system architecture and cloud technology, including IAM, network security, firewalls, user account management, audit and logging, and security concepts as outlined in ISO27001/2, OWASP, and related regional standards.
• Implement security measures in a Microsoft Azure environment and manage global systems using primarily PaaS and SaaS architectures, focusing on AI, Blockchain, Quantum Computing, and Metaverse subjects.

Qualifications

• Significant working security experience and knowledge in designing, implementing, and operating security controls in areas such as AI security technologies, blockchain, cloud security, application security, and infrastructure security.
• Experience with agile methodologies, cloud security, and cloud-based solutions in Microsoft Azure and Azure PAAS services.
• Knowledge of IT system architecture concepts and cloud technology, as well as supporting technologies like IAM, network security, firewalls, user account management, audit and logging, and security concepts as outlined in ISO27001/2, OWASP, and related regional standards.
• Advanced degree in Computer Science or a related field, or equivalent work experience. CISSP, CCSP, CISM, or similar security certifications preferred.

Skills and Attributes

• Strong communication skills and ability to work with stakeholders ranging from developers to architects to business leaders to clients.
• Hands-on experience with developing and implementing AI security technologies, especially generative AI and large language models (LLMs).
• Experiences with designing and enforcing security protocols for blockchain technologies and applications.
• Experience with cloud security, including virtualization, cloud infrastructure, and public cloud offerings.
• Experience with application security, including REST API and microservices architecture.
• Experience with infrastructure security, including identity & access management, intrusion detection and prevention, security monitoring, and data encryption solutions.
• Working experience with open-source web technologies and programming languages, particularly in InfoSec code review.
• Significant experience in implementing security in a Microsoft Azure environment and practical knowledge of implementing global systems using a primarily PaaS and SaaS architecture.
• Advanced degree in Computer Science or a related discipline; or equivalent work experience.

Pay

The base salary range for this position in the US is $128,100 to $239,600. For the New York City Metro Area, Washington State, and California (excluding Sacramento), the range is $153,800 to $272,300. Individual salaries are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills, and geography.