Senior Cloud Security Architect - Hybrid/Remote

EY; Wrocław; Hybrid; PLN 180,000 - 260,000; Full time

Job summary

EY GDS Poland is seeking a Senior Security Consultant to act as a trusted security advisor within IT Services. You will work with architects, engineers, and product managers to define risk-based security requirements and implement secure-by-default designs across platforms and services.

The role involves engaging with project teams, translating vulnerabilities into business risk terms, and providing security guidance to ensure compliance with industry standards across EY’s global technology

Qualifications

• Advanced degree in Computer Science or a related discipline.
• GIAC/CISSP/CISM/CISA or similar cloud-security certifications preferred.
• Five+ years of experience managing a significant information security risk function.
• Experience communicating security findings to IT and business leadership.

Responsibilities

• Define security architectures and provide pragmatic guidance balancing benefit and risk.
• Engage IT project teams to identify and prioritize security controls throughout the SDLC.
• Perform threat modeling and risk assessments for information systems and applications.
• Maintain and enhance information security risk assessment methodologies.
• Define security configuration standards for shared and multi-tenant platforms.

Skills

Identity and Access Management

Cloud Security

Infrastructure Security

Application Security

Leadership

Communication

Security risk management

SDLC security

Education

Advanced degree in Computer Science or related discipline

Tools

Azure AD

WAFs

API Gateways

Security Monitoring

Job description

EY GDS Poland is seeking a Senior Security Consultant to act as a trusted security advisor within IT Services. You will work with architects, engineers, and product managers to define risk-based security requirements and implement secure-by-default designs across platforms and services.

The role involves engaging with project teams, translating vulnerabilities into business risk terms, and providing security guidance to ensure compliance with industry standards across EY’s global technology