Consultant

As a Consultant in our Cybersecurity practice you will be working within IT Risk and Security and will have exposure to cyber security assessments and work in teams to deliver security implementations or remediation programs.


You will have responsibility to
Deliver information security projects as part of an integrated team of Advisory professionals.


Define technical and business requirements for information security solutions.


Define information security processes and policies which secure and enable the business.


Enforce business, privacy and security policies.


Implement IT and information security related technology products.


Review, assess, benchmark and develop issue remediation action plans for all aspects of information security programs and technologies.


Develop information security strategies, architectures and implementation plans
Perform basic supervisory duties to mentor and coach junior staff.


Develop people through effectively delegating tasks and providing guidance to staff.


Assign and review the work of more junior employees and assist in the preparation of the final work products in order to confirm the work is performed with the highest quality standards.


Provide performance feedback and training, and conduct performance reviews.


Foster an efficient, innovative, and team-oriented work environment.


Skills and attributes for success
Experience in information and cyber security is essential for this role.

A Big 4 background or comparable consulting experience is helpful, although EY will provide ongoing training and support to develop your consulting skills.

We therefore welcome applicants with industry experience and broad background across security and experience in 1 or more of the following areas would be beneficial
Experience of security methods such as vulnerability assessments, penetration testing, privacy assessments, intrusion detection, incident response, security policy creation, enterprise security strategies, architectures and governance
Understanding of networking (TCP/IP, OSI model), operating system fundamentals (Windows, UNIX, mainframe), security technologies (firewalls, IDS/IPS, etc.

) and application programming/scripting languages (C, Java, Perl, Shell)
Capability and experience in the following areas
o Attack & Penetration Testing / Ethical Hacking
o Cyber Incident Response
o Cyber Strategy & Programme Assessment