Home
Communities
Companies
- Companies
  
  Discover best places to work
- Compare Companies
  
  Compare & find best workplace
- Add Office Photos
  
  Bring your workplace to life
- Add Company Benefits
  
  Highlight your company's perks
Reviews
- Company reviews
  
  Read reviews for 6L+ companies
- Write a review
  
  Rate your former or current company
Salaries
- Browse salaries
  
  Discover salaries for 6L+ companies
- Salary calculator
  
  Calculate your take home salary
- Are you paid fairly?
  
  Check your market value
- Share your salary
  
  Help other jobseekers
- Gratuity calculator
  
  Check your gratuity amount
- HRA calculator
  
  Check how much of your HRA is tax-free
- Salary hike calculator
  
  Check your salary hike
Interviews
- Company interviews
  
  Read interviews for 40K+ companies
- Campus placements
  
  Interviews questions for 2K+ colleges
- Share interview questions
  
  Contribute your interview questions
Jobs
Awards

WINNERS AWAITED!
- ABECA 2025
  
  WINNERS AWAITED!
  
  AmbitionBox Employee Choice Awards - 4th Edition
- ABECA 2024
  
  AmbitionBox Employee Choice Awards - 3rd Edition
- AmbitionBox Best Places to Work 2022
  
  2nd Edition
- AmbitionBox Best Places to Work 2021
  
  1st Edition

Add office photos

Engaged Employer

Ernst & Young

Compare

3.4

based on 10.8k Reviews

Video summary

1764 Ernst & Young Jobs

Security consultant

Ernst Young

3.4

based on 10.8k Reviews

2-6 years

₹ 5 - 18.5L/yr (AmbitionBox estimate)

Bangalore / Bengaluru

1 vacancy

Security consultant

Ernst & Young

posted 16hr ago

Job Role Insights

Flexible timing

Key skills for the job

Cyber Security Consulting Auditing Information Technology Risk Management Information Security

+ 4 more

Job Description

Define security architectures and provide pragmatic security guidance that balance business benefit and risks.
Design and develop cloud platform-specific security policies, standards, and procedures for management group and account/subscription management and configuration (e.g. Azure Policy, Azure Security Center, AWS Config), identity management and access control, firewall management, auditing and monitoring, security incident and event management, data protection, user and administrator account management, SSO, conditional access controls and password/secrets management.
Engage IT project teams throughout the SDLC to identify and prioritize applicable security controls and provide guidance on how to implement these controls
Perform risk assessments of information systems and infrastructure
Maintain and enhance the Information Security risk assessment methodology
Define security configuration standards for platforms and technologies
Develop appropriate risk treatment and mitigation options to address security risks identified during security review or audit
Translate technical vulnerabilities into business risk terminology for business units and recommend corrective actions to customers and project stake-holders
Provide knowledge sharing and technical assistance to other team members
Act as Subject Matter Expert (SME) in responsible technologies and have deep technical understanding of responsible portfolios

Skills and attributes for success

Experience with Cloud Identity and Access management solutions (AAD, Federation services, SAML, Ping) in implementation and operations.
experience with Big Data and advanced analytics, AI/ML services (such as /Azure SQL/Google Cloud SQL /Azure HDInsight/Key management solutions, Storage and backup, Load balancing, Security Management, Databases and EC2 or VM machine hosting Databricks, Data Factory, Data Lake Storage/BigQuery, Azure Analysis Services, Synapse Analytics, Machine Learning, etc.)
Experience in working with different Cloud platforms (Software as a Service (SaaS), Platform as a Service (PaaS) and Infrastructure as a Service (IaaS)) and environments (Public, Private, Hybrid) in a security role.
hands-on technical experience implementing security solutions for leading Cloud service providers e.g., Amazon AWS, Microsoft Azure, Google Cloud.
Ability to appropriately balance firm security needs with business impact benefit
Ability to facilitate compromise to incrementally advance security strategy and objectives
Ability to team well with others to facilitate and enhance the understanding compliance to security policies
Experience facilitating meetings with multiple customers and technical staff, including building consensus and mediating compromise
Five or more years Working experience with the architecture, design and engineering of web-based multi-tier information systems or network infrastructures
Experience conducting risk assessments, vulnerability assessments, vendor and third party risk assessments and recommending risk remediation strategies
Experience working with common information security standards, such as ISO 27001/27002, NIST, PCI DSS, ITIL, COBIT

To qualify for the role, you must have

Five or more years of experience in the management of a significant Information Security risk management function
5 or more years of experience in an Information Security or Information Technology discipline
Experience in managing the communication of security findings and recommendations to IT project teams and management

Ideally, you ll also have

Exceptional judgment, tact, and decision-making ability
Flexibility to adjust to multiple demands, shifting priorities, ambiguity, and rapid change
Outstanding management, interpersonal, communication, organizational, and decision-making skills
Strong English language skills are required
Candidates are preferred to hold or be actively pursuing related professional certifications within the GIAC family of certifications or CISSP, CISM or Azure certifications (AZ500, AZ303, AZ304, AZ900)

Employment Type: Full Time, Permanent

Read full job description

Ernst & Young Interview Questions & Tips

Prepare for Ernst & Young Security Consultant roles with real interview advice

Top Ernst & Young Security Consultant Interview Questions

Q1. 1. What is Virtual DOM? How does it work & Its algorithm? 2. React component life cycle in detail? 3. Higher-order components? 4. Basic ... read more

asked in Senior Consultant interview

View answer (1)

Q2. Covid Vaccination Distribution Problem As the Government ramps up vaccination drives to combat the second wave of Covid-19, you are tasked ... read more

asked in React Developer interview

View answer (1)

Q3. Risk management experience and audit work experience?

asked in Senior Consultant interview

View answers (5)

View all 653 questions