Technology Consulting - Cyber Security (Senior Associate/ Manager) - Based in Penang

Ernst & Young Advisory Services Sdn Bhd; George Town; On-site; MYR 80,000 - 120,000; Full time

Job summary

A leading professional services firm in George Town, Malaysia is seeking a Senior Associate/Manager in Cyber Security. You will lead engagements, manage client relationships, and support teams in creating high-quality security solutions. The ideal candidate has significant experience in information security, strong analytical skills, and relevant certifications. The firm promotes a diverse and inclusive culture and offers competitive remuneration.

Benefits

Competitive remuneration package

Flexible working arrangements

Continuous learning opportunities

Diverse and inclusive culture

Qualifications

• Minimum 2 years for Senior Associate and 5 years for Manager in information security.
• Experience in client service delivery and managing multiple engagement teams.
• Related professional certifications in information security or IT disciplines.

Responsibilities

• Lead cyber security engagements and projects for clients.
• Perform security risk and controls assessments.
• Generate high-quality reports for senior management.

Skills

Strong analytical and problem-solving skills

Advanced written and verbal communication skills

Team-oriented work environment

Creative problem-solving abilities

Education

Bachelor’s degree in computer science or related field

Tools

Information Security Certifications (CISSP, OSCP, CEH)

Job description

Cyber security is one of the most important risks facing businesses today. Systems, applications, and processes are becoming increasingly interconnected and automated and many organizations are now reliant upon technology to drive business strategy and growth.

Our clients are turning to EY for help and guidance on how to protect their assets, minimize business disruption and improve security as they continue to exploit technology to transform their business

The opportunity

At EY, we are expanding our already market leading cyber security services. We need excellent people, across all grades, to join our team and be part of our exciting growth strategy.

Your key responsibilities

As a Senior Associate/ Manager, you will lead the cyber security engagements and projects for our client. They may include implementation of security solutions for our clients and support the clients in their desire to protect the business. You will belong to an international connected team of specialists helping our clients with their most complex information security needs and contributing toward their business resilience.

You will have a responsibility for:

Senior Associate:

• Working across a portfolio of cyber engagements with our clients, reporting to a Manager or Senior Manager, responsible for the day to day completion of engagements and projects
• Working with team members you will create high quality reports, ready for review by a Manager or Senior Manager
• Where possible, you will identify opportunities for EY to assist our clients further and escalate these potential areas to the engagement manager
• Working with the engagement manager you will assist with the planning and delivery phases of engagements
• Contributing to the creation of proposals and marketing material
• Perform security risk and controls assessments and/or penetration testing to evaluate and analyze threat, vulnerability, impact, risk and security issues to Business.
• Assist client in evaluating, enhancing or developing, and managing their:
• Cybersecurity Management programs including technology controls, process controls, and governance, risk and compliance elements

Manager:

• Leading a portfolio of engagements and projects with our clients; reporting to a Director or Partner
• Managing and creating reports and via review ensuring the highest quality deliverables prior to Director’s and Partner’s review
• Contributing to developing the market for Cyber Security services across all sectors and identify sales opportunities and escalating these to senior management
• Establishing client relationships with senior stakeholders across our clients including internal stakeholders
• Working with prospective clients to identify opportunities, scope engagements, and create high quality proposals
• Advocating and championing Cyber Security service both internally to our wider network of colleagues and to our clients and the wider market
• Contributing to the creation of proposals and marketing material
• Managing engagements to time and budget
• Contributing to the development of the existing cyber risk team acting as mentor and coach to the junior members of the team and leading by example
• Contributing to the latest thought-leadership, industry research and creation of marketing collateral relating to cyber security
• Perform security risk and controls assessments and/or penetration testing to evaluate and analyze threat, vulnerability, impact, risk and security issues to Business.
• Assist client in evaluating, enhancing or developing, and managing their:
• Cybersecurity Management programs including technology controls, process controls, and governance, risk and compliance elements
• Business Continuity and Disaster Recovery Management programs
• Data Protection and Privacy management programs
• Threat and Vulnerability Management programs
• Security Incident Detection and Response management programs
• Identity and access management programs

Skills and attributes for success

• Strong analytical and problem-solving skills
• Strong drive to excel professionally, and to guide and motivate others
• Advanced written and verbal communication skills
• Dedicated, innovative, resourceful, analytical and able to work under pressure
• Foster an efficient, innovative and team-oriented work environment

To qualify for the role you must have

• A bachelor’s degree in computer science, computer/ electrical engineering, information technology or a related field
• Minimum 2 years for senior associate & minimum 5 years for Manager of recent relevant work experience in information security or information technology discipline, preferably in a technology consulting role with a leading management consultancy organization or professional services firm
• Experience in client service delivery and be able to manage multiple engagement teams and projects
• Related professional certifications such as CISSP, OSCP, CEH, CISM, etc.

Ideally, you’ll also have

• Experience in coaching and supervising junior team members
• A team player with good communication and interpersonal skills
• Creative, independent with good problem solving skills
• Proactive, dedicated, innovative, resourceful, strong analytical and able to work under pressure
• Analytical, Advanced report-written and verbal communication skills and presentation skills
• Demonstrated integrity within a professional environment

What we look for

Highly motivated individuals with excellent problem-solving skills and the ability to prioritize shifting workloads in a rapidly changing industry. An effective communicator, you’ll be a confident leader equipped with strong people management skills and a genuine passion to make things happen in a dynamic organization. If you’re ready to take on a wide range of responsibilities, and are committed to seeking out new ways to make a difference, this role is for you.

What we offer

EY offers a competitive remuneration package commensurate with your work experience,where you’ll be rewarded for your individual and team performance. We are committed tobeingan inclusive employer and are happy to consider flexible working arrangements(FWA), where this may be needed, guided by our FWA Policy. Plus, we offer:

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.