Cyber - PKI Engineer - Senior - Consulting

Cyber threats, social media, massive data storage, privacy requirements and continuity of the business as usual require heavy information security measures. As an information security specialist, you will lead the implementation of security solutions for our clients and support the clients in their desire to protect the business. You will belong to an internationally connected team of specialists helping our clients with their most complex information security needs and contributing toward their business resilience. You will be working with our Advanced Security Centers to access the most sophisticated tools available to fight against cybercrime.  

EY’s Cybersecurity practice functions as a center of excellence to assist our National Consulting practices in planning, pursuing, delivering, and managing large, complex full lifecycle initiatives along with providing expertise in leading practices, methods, and resources in the space of Cybersecurity. The Data Protection & Privacy (DPP) capability within the Cybersecurity practice is a critical competency that supports our clients across all industry sectors. 

The opportunity  

We currently are seeking a highly motivated individual to manage client engagement teams, work with a wide variety of clients to deliver professional services and manage business development activities on strategic and global priority accounts.   

We will support you with career-long training and coaching to develop your skills. As EY is a leading global service provider in this space, you will be working with the best of the best in a collaborative environment. So, whenever you join, however long you stay, the exceptional EY experience lasts a lifetime.  

Your key responsibilities 

As a Senior Consultant on our DPP team, you will help clients define technical and business requirements for data security solutions as well as develop business processes and policies related to controlling access to data. You will show demonstrated experience in managing teams and developing data security strategies as well as implementing solutions to provide data security and integrity. This includes helping clients to identify, understand and protect their most critical data throughout the data lifecycle. Engagements range from encryption strategy and program governance to implementing processes and technologies to provide leading data security capabilities. 

You and your team will implement and advise clients on multiple data security products and solutions, including

• Encryption and Key management
• PKI and Certificate management
• Cryptographic program strategy and development
• Data disposition solution strategy and implementation
• Data anonymization and pseudonymization
• Cryptographic vendor selection
• Cryptographic technology implementation
• Post-quantum encryption strategy and discovery
• Data Governance strategy and roadmap, operating model, and policies/standards/process

Skills and attributes for success 

• Consistently deliver quality client services. Monitor progress, manage risk, and ensure key stakeholders are kept informed about progress and expected outcomes. Stay abreast of current business and industry trends relevant to the client's business. 
• Establish relationships with client personnel at appropriate levels.  
• Demonstrate in-depth technical capabilities and professional knowledge. Demonstrate ability to assimilate to new knowledge.  
• Possess good business acumen.  
• Remain current on new developments in consulting services capabilities and industry knowledge   

To qualify for the role, you must have 

• Bachelor's degree and approximately 4-6 years of related work experience; or a graduate degree and approximately 3-5 years of related work experience. 
• Approximately 3-5 years of technical architecture experience integrating data protection software into clients' infrastructure and applications. 
• Knowledge of general security concepts and methods such as and methods such as encryption, data disposition, data classification, security policy creation, enterprise security strategies, architectures, and governance.
• Basic understanding of course-grain and fine-grain encryption and key management capabilities.
• Basic understanding of how to protect client’s data throughout the data lifecycle and effectively dispose of data at the end of its life using a variety of techniques, including tokenization, encryption, anonymization, and deletion.
• Technical architecture experience integrating data encryption and security tools into clients' infrastructure; network architecture design, implementation, and administration.
• Understanding of data governance and data lifecycle management.
• Knowledge and experience with data management pertaining to Data Privacy, Protection and Lifecycle
• Understanding of data discovery tools (e.g., Collibra, Informatica, BigID, Microsoft etc)

Ideally, you’ll also have

The successful candidate must hold or be willing to pursue related professional certifications such as CISSP, CISM, and/or CISA. EDMC DCAM certification a plus, but not prerequisite.

What we look for  

• Technical architecture experience integrating data protection software into clients' infrastructure; network architecture design, implementation, and administration. 
• Working knowledge of operating systems, virtual machine environments, mainframe security packages, and relational database management systems. 
• Willingness to travel to meet client needs; travel is estimated at up to 40-60%. 
• Valid driver's license in the US and a valid passport required; willingness and ability to travel internationally.