InfoSec Security Consultant

O projekcie Let us introduce you the job offer by EY GDS Poland - a member of the global integrated service delivery center network by EY.

As a Security Consultant within EY’s internal Security Consulting and Assurance team, the individual will be a trusted advisor to EY’s Audit Technologies portfolio. Daily responsibilities will include: close collaboration with technical project and program teams, defining security architecture and providing full stack security guidance, identifying and prioritizing security-related requirements, promoting secure-by-default designs and facilitating delivery of information security services throughout the system development life cycle (SDLC). The role will also direct technology teams in the implementation of appropriate risk treatment and mitigation options to address security vulnerabilities. Security Consultants are responsible for the translation of vulnerabilities into business risk terminology for communication to business stakeholders.

What we offer

EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across nine locations - Argentina, Hungary, India, the Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom - and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. We’ll introduce you to an ever-expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

The exceptional EY experience. It’s yours to build.

Zakres obowiązków

• Define security architectures and provide pragmatic security guidance that balance business benefits and risks.
• Engage technology teams to evaluate and prescribe security controls at all touchpoints throughout the technology architecture.
• Define security configuration standards for platforms and technologies.
• Provide knowledge sharing and technical assistance to other team members.
• Act as Subject Matter Expert (SME) in responsible technologies and have deep technical understanding of responsible portfolios.
• Perform risk assessments of information systems and infrastructure.
• Maintain and enhance the Information Security risk assessment methodology.
• Develop appropriate risk treatment and mitigation options to address security risks identified during security review or audit.
• Translate technical vulnerabilities into business risk terminology for business units and recommend corrective actions.

Wymagania

• Cloud technologies (MS Azure specifically).
• Strategic skills to analyze technology architectures and software solutions, identify security risk and prescribe mitigating security measures.
• Two or more years working experience with IT architecture, design and engineering of web-based multi-tier information systems or network infrastructures.
• Experience with security architecture, security design and security assessments.
• Ability to appropriately balance firm security needs with business impact & benefit.
• Ability to facilitate compromise to incrementally advance security strategy and objectives.
• Understanding of EY business objectives and relationship building across EY IT.
• Ability to team well with others to facilitate compliance to security policies.
• Experience facilitating meetings with multiple customers and technical staff.
• High degree of tolerance for ambiguity.
• Experience conducting risk and vulnerability assessments and recommending remediation strategies.
• Experience with ISO 27001/27002, NIST, PCI DSS, ITIL, COBIT.
• Knowledge of AI security is a plus.

To qualify for the role, you must have

Education

• An advanced degree in Computer Science or a related discipline, or equivalent work experience.

Required Experience

• MS Azure or other cloud technology platforms. MS Azure preferred.
• Two or more years of experience in security architecture, application security, networking, data center configuration, cloud technology.
• Two or more years of experience in an Information Security or Information Technology discipline.
• Experience in the Agile development lifecycle.
• Experience in managing communication of security findings and recommendations.
• Exceptional judgment, tact, and decision-making ability.
• Flexibility to adjust to multiple demands, shifting priorities, ambiguity, and rapid change.
• Outstanding management, interpersonal, communication, organizational, and decision-making skills.
• Strong English language skills are required.

Ideally, you’ll also have

• Experience in technologies such as blockchain, RPA, AI, etc.
• Knowledge of AI Security.

Certification requirements

• It is preferred that candidates hold or be actively pursuing related professional certifications within the GIAC family of certifications or CISSP, CISM or CISA.