RC-DR-Cloud Security Assessment-Senior

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

EY-Digital Risk – Cloud Security

At EY, we’re all in to shape your future with confidence.

Join EY and help to build a better working world.

As part of our Risk Consulting, you will be joining the Digital Risk Consulting Team.

The opportunity

We’re looking for Senior Consultant with expertise in Cloud Security and Risk Assessment’ to lead the audit/review of security architecture and controls across hybrid cloud environments. This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the growth of our service offering.

Your key responsibilities

• Evaluate key cloud security solutions such as Cloud Security Posture Management (CSPM), Cloud Workload Protection Platforms (CWPP), Identity and Access Management (IAM), Cloud Access Security Brokers (CASB), Web Application Firewalls (WAF), Cloud encryption and key management services, Security Information and Event Management (SIEM), and security automation tools with respect to hybrid cloud security posture (AWS, Azure, GCP, and on-premises).
• Evaluate the effectiveness of the implementation and operations of vulnerability management and patching programs, including timely identification, prioritization, and remediation of cloud and on-premises vulnerabilities
• Evaluate security hardening standards and secure cloud configuration best practices across all environments.
• Assess AWS, Azure, and GCP environments against industry standards, regulatory requirements, and cloud security best practices.
• Review and design cloud security architectures, landing zones, network segmentation, identity and access management, privileged access management, encryption, and key management controls.
• Conduct cloud security strategy, maturity, governance, and target-state assessments to support cloud adoption and transformation initiatives.
• Perform technical security configuration reviews across cloud infrastructure, platforms, containers, Kubernetes, serverless services, and cloud-native security controls.
• Assess cloud security posture using CSPM and CNAPP solutions such as Microsoft Defender for Cloud, Prisma Cloud, or equivalent tools.
• Conduct cloud security audits, risk and compliance reviews, maturity assessments, and third-party or vendor security assessments.
• Develop actionable security improvement recommendations and prioritised roadmap strategies based on identified cloud risks, control gaps, and target-state objectives
• Evaluate DevSecOps implementation to embed security into CI/CD pipelines and cloud deployments.
• Evaluate the current practice followed of cloud security monitoring and incident management
• Conducting risk assessments and vulnerability analyses in cloud environments and propose mitigation strategies
• Support larger Internal Audit and Cyber security audits engagements especially on domains related to cloud security
• Develop cloud security policies/procedures to protect data in the cloud and prevent unauthorized access.
• Good understanding of cloud security standards/regulations globally and within the MENA region (KSA, UAE, Qatar)
• Communicate cloud security risks, strategies, and remediation plans clearly to technical teams and senior management
• Ability to translate complex technical details into clear, business-understandable language for effective communication with stakeholders/business users

Skills and attributes for success

• Strong technical knowledge of AWS, Azure, GCP, OCI and on-premises security architectures and controls.
• Proven ability to evaluate cloud security technologies, policies and processes.
• Experience conducting cloud risk assessments against global/MENA specific standards/regulations
• Experience managing cloud security metrics, reporting, and audit readiness.
• Excellent communication and stakeholder management skills.
• Experience in incident management and response in cloud environments.
• Familiarity with DevSecOps and secure CI/CD practices in Cloud

To qualify for the role, you must have

• 5–8 years of experience in cloud security, with hands-on expertise in hybrid and multi-cloud environments.
• Knowledge of CIS Benchmarks, NIST, ISO 27001, CSA CCM, and cloud security best practices.
• Experience leading client workshops, assessments, cloud security strategy engagements, and preparing executive-level reports and recommendations.
• Open to travel to MENA (up to 50% of the time)
• Excellent communication skills with consulting experience preferred

Ideally, you’ll also have

• A bachelor's or master's degree in B. TECH/B. E, MS in computer science, MBA (IT or Systems) or a related discipline.
• Certifications such as CCSP, CCSK, AZ-500, AWS Security Specialty, Google Professional Cloud Security Engineer, CISSP, or CISM preferred.
• Microsoft Certified: Azure Security Engineer Associate
• Google Cloud Professional Cloud Security Engineer)

What working at EY offers

At EY, we’re dedicated to helping our clients, from start–ups to Fortune 500 companies — and the work we do with them is as varied as they are.

You get to work with inspiring and meaningful projects. Our focus is education and coaching alongside practical experience to ensure your personal development. We value our employees and you will be able to control your own development with an individual progression plan. You will quickly grow into a responsible role with challenging and stimulating assignments. Moreover, you will be part of an interdisciplinary environment that emphasizes high quality and knowledge exchange. Plus, we offer:

• Support, coaching and feedback from some of the most engaging colleagues around
• Opportunities to develop new skills and progress your career
• The freedom and flexibility to handle your role in a way that’s right for you

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.