Consultant - Business Consulting Risk

As a Consultant in our Cybersecurity practice you will be working within IT Risk and Security and will have exposure to cyber security assessments and work in teams to deliver security implementations or remediation programs.
You will have responsibility to
Deliver information security projects as part of an integrated team of Advisory professionals.
Define technical and business requirements for information security solutions.
Define information security processes and policies which secure and enable the business.
Enforce business, privacy and security policies.
Implement IT and information security related technology products.
Review, assess, benchmark and develop issue remediation action plans for all aspects of information security programs and technologies.
Develop information security strategies, architectures and implementation plans
Perform basic supervisory duties to mentor and coach junior staff.
Develop people through effectively delegating tasks and providing guidance to staff.
Assign and review the work of more junior employees and assist in the preparation of the final work products in order to confirm the work is performed with the highest quality standards.
Provide performance feedback and training, and conduct performance reviews.
Foster an efficient, innovative, and team-oriented work environment.
Skills and attributes for success
Experience in information and cyber security is essential for this role. A Big 4 background or comparable consulting experience is helpful, although EY will provide ongoing training and support to develop your consulting skills. We therefore welcome applicants with industry experience and broad background across security and experience in 1 or more of the following areas would be beneficial
Experience of security methods such as vulnerability assessments, penetration testing, privacy assessments, intrusion detection, incident response, security policy creation, enterprise security strategies, architectures and governance
Understanding of networking (TCP/IP, OSI model), operating system fundamentals (Windows, UNIX, mainframe), security technologies (firewalls, IDS/IPS, etc.) and application programming/scripting languages (C, Java, Perl, Shell)
Capability and experience in the following areas
o Attack Penetration Testing / Ethical Hacking
o Cyber Incident Response
o Cyber Strategy Programme Assessment

To qualify for the role you must have

A degree in engineering, B.E.or B.Tech and Masters in business administration
2 to 5 years of relevant work experience post-graduate qualification
Additional relevant Security related Certifications would be preferred, though not a must
Certifications Relevant security certification, Offensive Security Certified Professional (OSCP) preferred

Ideally you ll also have
Demonstrated ability to contribute to the development of client deliverables and technical content
Good written and verbal communications skills
Excellent leadership and teaming skills
Demonstrated integrity within a professional environment
Ability to travel at least 75% of time

Highly motivated, you will be a good communicator with the ability to contribute confidently to technical security discussions with peers and management. You will be a team player who is not only looking to enhance their own career, but recognises the value in working well with others and the value of teamwork.