Job Summary

As a Security Consultant within EY's internal Global Information Security team, the individual will be a trusted security advisor to the Client Technology Platforms Delivery organization within IT Services. The Client Technology Platforms delivery organization is responsible for end-to-end delivery of technology programs and projects supporting EY's Client Technology service lines including delivery of a global managed services platform, big data and analytics solutions as well as individual line of business solutions and services. This role will directly engage in supporting a team of architects, engineers, and product managers for delivery on programs and projects, defining security risks and controls, providing security guidance, identifying and prioritizing security-related requirements, promoting secure-by-default designs and facilitating delivery of information security services throughout the system development life cycle (SDLC).



The role will also develop and directly communicate appropriate risk treatment and mitigation options to address security vulnerabilities translated vulnerabilities into business risk terminology for communication to business stakeholders.
Your key responsibilities
Support a technical team with a focuse on the following responsibilities:
Define security architectures and provide pragmatic security guidance that balance business advantage and risks
Engage IT project teams throughout the SDLC to identify and prioritize applicable security controls and provide guidance on how to implement these controls
Perform threat modeling and risk assessments of information systems, applications and infrastructure
Maintain and enhance the Information Security risk assessment and certification methodologies
Define security configuration standards for shared and multi-tenant platforms and technologies
Develop appropriate risk treatment and mitigation options to address security risks identified during security review or audit

📌 Senior Security Consultant Noida
🏢 EY
📍 Noida