InfoSec Security Consultant

Brak informacji o wynagrodzeniu

SeniorHybryda·WrocławFull-time

#474173·Dodano dziś·0

Źródło: nofluffjobs.com

Aplikuj teraz

Tech Stack / Keywords

CloudMSAzureSecurityDegreeISONISTITILNetworkingAgile Blockchain RPAAIGIACCISSPCISMCISAblockchain

Podsumowanie oferty

As a Security Consultant in EY’s internal Security Consulting and Assurance team, you will advise the EY Audit Technologies portfolio. You will define security architecture, provide security guidance, assess risks, and support secure delivery throughout the system development life cycle, including work with MS Azure.

Wymagania

An advanced degree in Computer Science or a related discipline, or equivalent work experience.
Two or more years of experience in security architecture, application security, networking, data center configuration, or cloud technology.
Two or more years of experience in an Information Security or Information Technology discipline.
Experience with MS Azure or other cloud technology platforms; MS Azure is preferred.
Experience working with IT architecture, designing and engineering web-based multi-tier information systems or network infrastructures.
Experience with security architecture, security design, and security assessments.
Experience conducting risk and vulnerability assessments and recommending remediation strategies.
Experience in the Agile development lifecycle.
Experience communicating security findings and recommendations.
Experience with ISO 27001/27002, NIST, PCI DSS, ITIL, and COBIT.
Strong English language skills are required.
Ability to balance security needs with business impact and benefits, facilitate compromise, and support compliance with security policies.
Ability to facilitate meetings with customers and technical staff.
Exceptional judgment, tact, decision-making, interpersonal, communication, organizational, and management skills; flexibility in response to changing priorities and ambiguity.

Nice to have:

Experience with technologies such as blockchain, RPA, and AI.
Knowledge of AI security.
Hold or be actively pursuing a professional certification from the GIAC family, or CISSP, CISM, or CISA.

Obowiązki

Define security architectures and provide security guidance that balances business benefits and risks.
Work with technology teams to evaluate and prescribe security controls across technology architectures.
Define security configuration standards for platforms and technologies.
Provide knowledge sharing and technical assistance to team members.
Act as a subject matter expert in assigned technologies and portfolios.
Perform risk assessments of information systems and infrastructure.
Maintain and enhance the Information Security risk assessment methodology.
Develop risk treatment and mitigation options for risks identified during security reviews or audits.
Translate technical vulnerabilities into business risks and recommend corrective actions.
Identify and prioritize security requirements, promote secure-by-default designs, and facilitate information security services throughout the system development life cycle.
Direct technology teams in implementing risk treatment and mitigation options for security vulnerabilities.

Benefity

Continuous learning and development of skills.
Tools and flexibility to make an impact.
Insights, coaching, and support for leadership development.

EY GDS

40 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz