职位薪资:14000-25000
经验:3-5年
学历:本科
类型:全职
As a Senior Consultant in our Greater China Cyber Security practice you will have exposure to cyber security assessments and work in teams to deliver security implementations or remediation programmes.
You will have responsibility for
* Working across a portfolio of cyber engagements with our clients, reporting to a Manager or Senior Manager, responsible for the day to day completion of security assessments or delivering elements of a security transformation programme
* Working with team members you will create high quality reports, ready for review by a Manager or Senior Manager
* Where possible, you will identify opportunities for EY to assist our clients further and escalate these potential areas to the engagement manager
* Working with the engagement manager you will assist with the planning and delivery phases of engagements
* Contributing to the creation of proposals and marketing material.
You will have knowledge and experience of the following
* Security strategy, assessment, designing and implementing security strategy, governance frameworks over processes, controls, organisation & infrastructure to management cyber security
* Security transformation programmes – design & management of security solution implementations and / or remediation programmes
* Identity and access management (IDAM), assessing current IDAM practices and designing solutions to improve JML processes, privileged access and recertification programmes
* Breach and incident management, design and implementation of breach and major incident management practices
* Security policies and procedures, design and implementation of security policies, procedures, standards and controls in line with regulation and/or current standards, ISO27001, NIST, SANS etc.
* Data privacy, implementation of data protection / GDPR programmes to address confidentiality and security over customer, employee or patient data.
* Resilience, design and implementation of programmes to improve IT Disaster Recovery, Business Continuity
* Security over operational technology and control systems (SCADA)
* Security architecture – creating secure architecture designs for solutions, designing secure patterns for reuse and the delivery of architectural reviews using TOGAF or SABA
* Security around emerging technology platforms – mobile device platforms (iOS, Android), cloud services (IaaS, PaaS, SaaS), Big Data, Social media.
To qualify for the role you must have
* Security relation qualifications such as CISSP, CISM, CISMP, ISO27001 lead implementer or auditor, MBCI, IAPP(desirable)
* Solid analytical, problem solving and communication skills.
Ideally, you’ll also have
* Solid consulting experience is helpful
* Good understanding of industrial practice in cyber security is an advantage.
What we look for
Highly motivated, you will be a good communicator with the ability to contribute confidently to technical security discussions with peers and management. You will be a team player who is not only looking to enhance their own career, but recognises the value in working well with others and the value of teamwork
What working at EY offers
We offer a competitive remuneration package where you’ll be rewarded for your individual and team performance. Our comprehensive Total Rewards package includes support for flexible working and career development, and with FlexEY you can select benefits that suit your needs, covering holidays, health and well-being, insurance, savings and a wide range of discounts, offers and promotions. Plus, we offer
* Support and coaching from some of the most engaging colleagues around
* Opportunities to develop new skills and progress your career
* The freedom and flexibility to handle your role in a way that’s right for you