Technology Consulting - Cyber Security (Consultant to Senior)

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

To better reflect this, ‘The exceptional EY experience. It’s yours to build.’ is our new promise to our people.

The opportunity

EY is committed to doing its part in building a better working world. The insights and quality services we deliver help build trust and confidence in the capital markets and in economies the world over. We develop outstanding leaders who team to deliver on our promises to all of our stakeholders. In so doing, we play a critical role in building a better working world for our people, for our clients and for our communities.

Cybersecurity Team Provide end-to-end services to secure digital infrastructure and data, including strategy design and implementation, vulnerability testing, compliance, assurance, and operational management

Your key responsibilities

• Perform cyber security and IT security assessments for clients (e.g. cyber security program assessment, cyber security risk assessments, IT network infrastructure reviews, system technical configurations review, information security policies and processes/procedures review etc.)
• Work on IT security design, analysis and implementation of security protection solution.
• Evaluate and analyze threat, vulnerability, system weakness, impact and risk to security issues discovered from security assessments like Vulnerability Assessment (VA), Penetration Testing (PenTest), etc.
• Advise clients on the security issues, including explanation on the technical details and how they can remediate the vulnerabilities in the processes, controls and systems.
• Advise client on the security incident response end-to-end process (i.e. preparation, detection, analysis, response and recovery of the security incident).    

Skills and attributes for success

To qualify for the role you must have

• Bachelor's or Master's degree in Management Information Systems (MIS), Computer Engineering, Computer Science, Cybersecurity, Information Systems, IT Security, ICT, or a related field.
• Minimum 2 years of experience in cybersecurity, IT security management, IT security assessment, IT audit, or related areas.
• Experience in cybersecurity assessment frameworks and standards, such as NIST Cybersecurity Framework (NIST CSF), ISO/IEC 27001, IT Audit, or other related methodologies.
• Familiarity with leading cybersecurity processes, frameworks, and security tools.
• Strong technical background in information security, including security design, implementation, and assessment.
• Experience in project planning and project management would be an advantage.
• Experience in modern cybersecurity practices, such as DevSecOps, penetration testing, red teaming, and system resilience design.
• Knowledge of emerging technologies and their security implications, including Cloud Computing, Blockchain, Big Data, Artificial Intelligence (AI), and Machine Learning (ML).
• Professional certifications are preferred, such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), ISO/IEC 27001 Lead Auditor, Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), or Offensive Security Certified Professional (OSCP).
• Highly proficient in both Thai and English, with excellent written and verbal communication, analytical, and problem-solving skills.

Ideally, you’ll also have

• Having experience in project planning and management will be a plus. 
• Professional certifications such as Offensive Security Certified Professional (OSCP), Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), and / or Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or ISO27001 will be highly considered 
• Experience in new generation security practices (i.e. DevSecOps, iPentest, RedTeaming, System Resilience Design) 
• Experience in Emerging Technologies (i.e. Cloud Computering, Blockchain, Big Data, A.I./M.L.)  

What we look for

We’re interested in intellectually curious people with a genuine passion for cyber security. With your specialization in attack and penetration testing, we’ll turn to you to speak up with innovative new ideas that could make a lasting difference not only to us – but also to the industry as a whole. If you have the confidence in both your presentation and technical abilities to grow into a leading expert here, this is the role for you.

What we offer

We offer a competitive remuneration package. Our comprehensive Total Rewards package includes support for flexible working and career development, covering holidays, health and well-being, insurance, savings and a wide range of discounts, offers and promotions.

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

The exceptional EY experience. It’s yours to build.

EY | Shape The Future with Confidence 

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.  

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.  

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.