(INV) Senior Consultant , Cybersecurity, Strategy Governance Risk and Compliance, TC, UKI

EY; Glasgow; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Flexible working

Career development

Job summary

EY is seeking an experienced Senior Consultant to join our Cyber Strategy, Governance, Risk and Compliance (GRC) team. You will help organisations define, manage and transform their cyber security capabilities, supporting clients across sectors to address evolving threats, regulatory requirements and business priorities.

As part of our multidisciplinary teams, you will develop cyber security strategies, operating models and transformation roadmaps that enable secure growth and resilience,

Qualifications

• Professional experience delivering cyber security in operational or consulting roles.
• Ability to develop written presentations for senior stakeholders.
• Experience building governance frameworks and risk management processes.
• Knowledge of regulatory requirements and industry frameworks.

Responsibilities

• Deliver cyber strategy and transformation engagements aligned to business objectives.
• Conduct cyber maturity, capability and risk assessments against industry frameworks.
• Design and enhance governance frameworks, including roles, policies and controls.
• Support cyber risk management activities and incident response preparedness.
• Lead client engagements and contribute to business development.

Skills

Cyber strategy

Governance

Risk assessment

Regulatory compliance

Education

Bachelor's degree

CISSP

CISM

ISO27001 Lead Implementer

Tools

GRC platforms

Job description

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

The Opportunity

EY is seeking an experienced Senior Consultant to join our Cyber Strategy, Governance, Risk and Compliance (GRC) team. You will help organisations define, manage and transform their cyber security capabilities, supporting clients across a range of sectors to address evolving threats, regulatory requirements and business priorities.

As a key member of our team, you will work with clients to develop cyber security strategies, operating models, governance frameworks and transformation roadmaps that enable secure business growth and resilience. You will play an important role in delivering complex client engagements, supporting business development activities and contributing to the continued growth and evolution of EY's Cyber practice.

Working alongside multidisciplinary teams in the UK and globally, you will help clients understand and manage cyber risk, strengthen governance arrangements, improve compliance and translate security ambitions into practical, achievable outcomes. You will also contribute to the development of innovative solutions, thought leadership and industry propositions that address emerging cyber challenges and market demands.

This role offers the opportunity to work across a broad range of cyber and technology topics, engaging with senior stakeholders and helping some of the world's leading organisations build confidence in their cyber resilience.

Your Key Responsibilities

• Delivering cyber strategy and transformation engagements, supporting clients to define security visions, strategies, target operating models, investment priorities and multi-year transformation roadmaps aligned to business objectives.
• Conducting cyber security maturity, capability and risk assessments, identifying strengths, weaknesses and opportunities for improvement against industry frameworks, regulatory requirements and leading practices.
• Designing and enhancing cyber governance frameworks, including organisational structures, roles and responsibilities, policies, standards, controls, decision-making forums and reporting mechanisms.
• Supporting cyber risk management activities, including risk identification, assessment, quantification, treatment planning and the development of risk management processes aligned to organisational risk appetite.
• Delivering regulatory and compliance engagements, helping clients assess and improve conformance with applicable cyber security, privacy, operational resilience and industry-specific requirements.
• Developing practical recommendations and implementation roadmaps to improve cyber resilience, governance effectiveness and risk management maturity.
• Building and maintaining trusted client relationships, working with senior stakeholders to understand business challenges and translate technical issues into strategic business outcomes.
• Supporting business development activities, including proposals, market propositions, thought leadership and client pursuits.
• Working collaboratively across EY's Cyber and Technology Consulting teams to deliver integrated solutions that address client priorities and maximise value.
• Coaching and supporting junior team members, contributing to team development, knowledge sharing and the continued growth of the Cyber practice.
• Creating high-quality reports as part of a team, for review by engagement and project leaders.
• Identifying sales opportunities and working with senior practice leaders and market leaders in the creation of proposals and marketing material; creating thought leadership and market materials for selling and promoting EY cyber security offerings
• Leading and developing junior team members by sharing knowledge, acting as mentor and coach to them and leading by example

To qualify for the role you must have

• Professional experience delivering cyber security either in an operational or consulting role
• High level of drive, commitment to achieving solutions, and ability to work under pressure and under limited supervision ('self-starter') in unstructured environments
• Demonstrated your ability to build and maintain subject-matter knowledge across evolving cyber threats, regulatory expectations, industry frameworks and emerging technology risks, applying these insights to client challenges
• Ability to develop impactful written presentations and participate effectively in meetings with senior stakeholders

Ideally, you’ll also have

• Security related qualifications such as CISSP, CISM, CISMP, ISO27001 lead implementer or auditor, MBCI or IAPP. We value practical experience so welcome applications from those who do not hold, or are still working towards their qualifications.
• Key delivery experience in the following security disciplines cyber strategy, governance risk and compliance
• Key sector experience in one or more of the following: Government & Public sector / Energy & Utilities / Retail and Consumer products / Life sciences / Telecoms, Media and Technology / Transport
• Professional services experience working with market leading organisations in the delivery of their cyber solutions

Please note: The successful candidate must undergo and pass checks in line with SC (Security Check) clearance standards after joining EY. These checks may include, but are not limited to, verification of identity, right to work in the UK, employment history, proof of address may be required and unspent criminal convictions. Candidates must be a UK national or have been a resident in the UK for a minimum of five years and ensure that they have not spent more than six months outside the UK.

What We Look For

• Core consulting skills – Advanced data and evidence management, client management on remediation programmes, driving innovation and continuous improvement
• Technical skills – Strong technical insight, practical knowledge and specialist capability
• Versatility – Proven ability to adapt and learn in an innovative environment

What Working At EY Offers

We offer a competitive remuneration package. Our comprehensive Total Rewards package includes support for flexible working and career development, and with FlexEY you can select benefits that suit your needs, covering holidays, health and well-being, insurance, savings and a wide range of discounts, offers and promotions. Plus, we offer:

• Support, coaching and feedback from some of the most engaging colleagues around
• Opportunities to develop new skills and progress your career
• The freedom and flexibility to handle your role in a way that’s right for you

EY is committed to be an inclusive employer and we are happy to consider flexible working arrangements. We strive to achieve the right balance for our people, enabling us to deliver excellent client service whilst allowing you to build your career without sacrificing your personal priorities. While our client-facing professionals may be required to travel regularly, and at times be based at client sites, our flexible working arrangements can help you to achieve a lifestyle balance.

EY | Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.