Senior InfoSec Consultant

About the role

The EY Global Information Security team is seeking a skilled security consultant to lead the design, development, and implementation of security controls for market-leading regional and global systems, particularly those based on cloud technologies. This role involves working closely with client engagement teams and technologists worldwide to support innovative digital services leveraging cutting-edge technologies like AI, Blockchain, and Cloud Security.

Responsibilities

• Design, implement, and operate security controls in cloud-based systems using Agile methodologies and CI/CD pipelines.
• Develop and enforce security protocols for blockchain technologies and applications.
• Support the design and implementation of security controls for multi-tier business solutions, including application-level access and entitlement management, data tenancy and isolation, encryption, and logging.
• Integrate common infrastructure security technologies and solutions into business solution architectures, including identity & access management, intrusion detection and prevention, security monitoring, and data encryption.
• Work with Open Source web technologies and programming languages, with a focus on InfoSec Code Review.
• Implement security measures in a Microsoft Azure environment and manage global systems using primarily PaaS and SaaS architectures, including AI, Blockchain, Quantum Computing, and Metaverse subjects.
• Apply knowledge of IT system architecture and cloud technology, along with supporting technologies such as IAM, network security, firewalls, user account management, audit and logging, and security concepts outlined in ISO27001/2, OWASP, and related regional standards.

Qualifications

• Significant working security experience and knowledge in designing, implementing, and operating security controls in areas such as AI security technologies, blockchain, cloud security, and application security.
• Advanced degree in Computer Science or a related field, or equivalent work experience.
• CISSP, CCSP, CISM, or similar security certifications preferred.
• Strong communication skills and ability to work with stakeholders at various levels, including developers, architects, and business leaders.