Senior Consultant, Cyber, Cloud, FS

EY; City of Edinburgh; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Flexible working

Career development

Health & wellbeing

Insurance

Job summary

EY in the UK is seeking a Cyber Security Senior Consultant to join our EMEIA practice, with offices in Edinburgh or Canary Wharf. The role requires on-site commitment of three days per week to support client delivery and cloud-native security design.

You will lead engagements, contribute to CNAPP/CSPM deployments across AWS/Azure/GCP, and coach junior colleagues while developing trusted client relationships in the UK Financial Services sector.

Qualifications

• Experience advising UK financial services on cloud security.
• Knowledge of UK Financial Services security standards.
• Hands-on experience contributing to cloud security architecture and delivery initiatives.
• Solid architectural understanding across core cloud services (networking, IAM/workload identity, compute, containers, and data services) on at least one major cloud platform (ideally two).
• Practical exposure to CNAPP/CSPM platforms (e.g. Wiz, Prisma Cloud, Microsoft Defender).
• Foundational knowledge of Kubernetes security, including RBAC, workload identity, and container image security.
• Understanding of secrets management and machine identity.
• Strong written and verbal communication skills, with experience producing client‑facing documentation and participating in technical discussions with both engineers and non‑technical stakeholders.
• Experience working in consulting or complex, regulated environments.

Responsibilities

• Deliver cyber security engagements across cloud security designs.
• Translate findings into prioritized remediation actions and user stories.
• Develop SOWs, delivery plans and effort estimates.
• Support pre-sales activities including RFP responses, demos, and solution architecture workshops.
• Support engagement managers by producing high-quality deliverables and reviewing security configurations.
• Contribute to accelerators like reference architectures and runbooks to speed engagements.
• Collaborate with alliance partners and product vendors on cloud security tooling.
• Build strong relationships with clients and EY stakeholders.

Skills

Cloud security

Kubernetes

CNAPP/CSPM

AWS

Threat modelling

Security architecture

Cloud platforms

Tools

Wiz

Prisma Cloud

Microsoft Defender

Kubernetes

Job description

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

The Opportunity

You can be based at our Canary Wharf office in London or our Edinburgh office. You will be required to be onsite three times per week.

EY’s EMEIA Cyber Practice continues to grow rapidly, and the UK team is seeking a Cyber Security Senior Consultant with experience supporting clients to secure cloud platforms. You will play a key role in client delivery and cloud-native security design, working under the guidance of Managers and Senior Managers.

You will join an expanding team of over 1,000 Cyber professionals across EMEIA and align to the UK Financial Services Cyber practice, supporting leading Financial Services organisations with advisory and delivery-led cyber engagements.

Your Key Responsibilities

UK Financial Services Cyber Security professionals draw upon their knowledge and experience to support the delivery of high-quality cyber engagements, act as a trusted advisor to clients, and contribute to business development activities on priority accounts.

Drawing on your technical expertise and industry exposure, you will contribute innovative ideas, adapt methods to client operating models and cultures, and support the development of EY thought leadership. You will also contribute to improving delivery efficiency and quality across engagements and internal initiatives.

Your role will involve working as a key delivery team member on engagements of varying size and complexity, operating under the direction of Managers, Senior Managers, and Directors. You will be expected to proactively identify risks and issues, elevate them appropriately, and contribute positively to a collaborative learning culture by coaching junior team members.

Client Responsibilities

• Support the delivery of Cyber Security engagements, contributing to cloud and multi-cloud security solution design across AWS, Azure, and/or GCP.
• Assist with the configuration and integration of CNAPP/CSPM tools to establish secure baselines, continuous visibility, misconfiguration prevention, and vulnerability/exposure management.
• Participate in technical discovery and threat modelling for cloud-native architectures (containers, Kubernetes, serverless), helping translate findings into prioritised remediation actions and user stories.
• Contribute to the development of Statements of Work (SOWs), delivery plans, and effort estimates; support pre-sales activities including RFP responses, demos, and solution architecture workshops.
• Support engagement managers by producing high-quality deliverables, reviewing security configurations and policies, and ensuring work is completed on time and to EY quality standards.
• Contribute to the creation of accelerators such as reference architectures, templates, runbooks, and security blueprints to improve consistency and speed across engagements.
• Work with alliance partners and product vendors to build familiarity with cloud security tooling and emerging capabilities.
• Build strong working relationships with clients and internal EY stakeholders across Consulting and other service lines.

People Responsibilities

• Support the development of junior team members through coaching and knowledge sharing.
• Provide input into performance feedback and engagement reviews.
• Contribute to people initiatives such as recruitment, onboarding, and internal training for Cyber professionals.

Skills and Attributes for Success

To qualify for the role you must have:

• Experience supporting or advising Financial Services organisations on cyber security best practice and cloud security risks.
• Awareness of UK Financial Services security standards and regulatory expectations.
• Hands‑on experience contributing to cloud security architecture and delivery initiatives.
• Solid architectural understanding across core cloud services (networking, IAM/workload identity, compute, containers, and data services) on at least one major cloud platform (ideally two).
• Practical exposure to CNAPP/CSPM platforms (e.g. Wiz, Prisma Cloud, Microsoft Defender).
• Foundational knowledge of Kubernetes security, including RBAC, workload identity, and container image security.
• Understanding of secrets management and machine identity.
• Strong written and verbal communication skills, with experience producing client‑facing documentation and participating in technical discussions with both engineers and non‑technical stakeholders.
• Experience working in consulting or complex, regulated environments.

Ideally you’ll also have:

• Exposure to Data Security Posture Management (DSPM).
• Experience with Infrastructure as Code and Policy as Code.
• Relevant certifications in cloud platforms or security (e.g. AWS/Azure/GCP, CISSP, CCSP, Kubernetes).

What We Look For

We are looking for candidates with strong technical foundations in cloud security, exposure to UK Financial Services environments, and the motivation to grow into leadership roles. You should be comfortable working directly with clients, eager to learn, and proactive in contributing to team success.

What We Offer

We offer a competitive remuneration package where you’ll be rewarded for your individual and team performance. Our comprehensive Total Rewards package includes support for flexible working and career development, and with FlexEY you can select benefits that suit your needs, covering holidays, health and well‑being, insurance, savings and a wide range of discounts, offers and promotions. Plus, we offer:

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.