Senior Cloud Security Architect - Hybrid (Wroclaw)

Ernst & Young Advisory Services Sdn Bhd; Wrocław; Hybrid; PLN 180,000 - 280,000; Full time

Job summary

EY Global Delivery Services (GDS) Poland is seeking a Security Consultant to join the Internal Global Information Security team. You will be a trusted security advisor supporting the Client Technology Platforms Delivery organization within IT Services, defining security risks and controls across SDLC, and communicating risk treatment options to stakeholders.

The role focuses on building secure-by-default designs, guiding architects, engineers and product managers, and delivering information

Qualifications

• Advanced degree in Computer Science or related field.
• GIAC/CISSP/CISM/CISA or similar certifications preferred.
• Five or more years of experience in information security risk management.
• Experience communicating security findings to IT leadership and executives.

Responsibilities

• Define security architectures and balance business benefits with risks.
• Engage IT project teams through the SDLC to implement controls.
• Perform threat modeling and risk assessments of information systems.
• Maintain and enhance Information Security risk assessment methodologies.
• Define security configuration standards for shared/multi-tenant platforms.
• Develop risk treatment options to address identified risks.
• Translate technical vulnerabilities into business risk terms for stakeholders.
• Provide knowledge sharing and SME guidance to team members.
• Act as Subject Matter Expert in responsible technologies and portfolios.

Skills

Identity & Access Management

Cloud Security

Infrastructure Security

Application Security

Leadership

Communication Skills

Education

Advanced degree in Computer Science

Job description

EY Global Delivery Services (GDS) Poland is seeking a Security Consultant to join the Internal Global Information Security team. You will be a trusted security advisor supporting the Client Technology Platforms Delivery organization within IT Services, defining security risks and controls across SDLC, and communicating risk treatment options to stakeholders.

The role focuses on building secure-by-default designs, guiding architects, engineers and product managers, and delivering information