Job Description

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.


We are currently looking ahead to the future and have exciting plans within our Cyber Security Service Line and are looking for Senior Consultants, Managers and Senior Managers to join our talent communities in preparation for this growth.


EY’s UK & Ireland Cyber Practice is part of a global cyber team of over 5,000 professionals focused on developing and delivering cutting edge security transformation programmes, cyber threat management, identity and access management, security architecture, data protection and privacy, and resilience services. We are part of a wider advisory organisation that collectively comprises a $4B, and growing, global consulting practice with 18,000 professionals. At EY, we have large scale plans to expand our already market leading Cyber Security practice and anticipate continued growth throughout the next five years. We need excellent people to join us and be part of our exciting growth strategy.


Cyber is a key growth area for us across, specifically we are looking for people with experience in:


Architecture
Cyber Transformation
Incident and Access Management
Operational Technology
Monitoring, Response & Resilience
Risk, Compliance & Privacy


If you are interested in hearing more about future opportunities, please send across your profile and one of the Recruitment team will be in touch.


What we look for:


We are looking for technology-minded, business-focused and creative people with a passion for bringing context to Cyber Security innovations and ability to demonstrate how we can help transform our clients’ day to day operations and decision making. We are looking for people who have been there and done it, who want to keep close to the technology and who want to deliver solutions that have optimum impact on their clients.


What We Offer


We offer a competitive remuneration package where you’ll be rewarded for your individual and team performance. Our comprehensive Total Rewards package includes support for flexible working and career development, and with FlexEY you can select benefits that suit your needs, covering holidays, health and well-being, insurance, savings and a wide range of discounts, offers and promotions. Plus, we offer:


Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.


If you are interested in hearing more about future opportunities, please send across your profile and one of the Recruitment team will be in touch.

Quick response

Required Knowledge

• K0001   Knowledge of computer networking concepts and protocols, and network security methodologies.
• K0002   Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
• K0004   Knowledge of cybersecurity and privacy principles.
• K0005   Knowledge of cyber threats an`d vulnerabilities.
• K0007   Knowledge of authentication, authorization, and access control methods.
• K0013   Knowledge of cyber defense and vulnerability assessment tools and their capabilities.
• K0042   Knowledge of incident response and handling methodologies.
• K0044   Knowledge of cybersecurity and privacy principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
• K0061   Knowledge of how traffic flows across the network (e.g., Transmission Control Protocol [TCP] and Internet Protocol [IP], Open System Interconnection Model [OSI], Information Technology Infrastructure Library, current version [ITIL]).
• K0112   Knowledge of defense-in-depth principles and network security architecture.
• K0179   Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).
• K0180   Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.
• K0297   Knowledge of countermeasure design for identified security risks.
• K0624   Knowledge of Application Security Risks (e.g. Open Web Application Security Project Top 10 list)

Required Skills

• S0027   Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.
• S0054   Skill in using incident handling methodologies.
• S0367   Skill to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).

Required Abilities

• A0123  Ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).