EY’s Cyber Security practice is one of the fastest growing areas of the business with an immediate requirement for security consultants with a diverse range of skills and experience. As a leader on our Cyber team you will be providing advisory and technical leadership to help our clients improve their cyber security posture to respond to the dynamic Cyber Security threats. You will provide security domain expertise and utilise your business insight to work closely with our clients to advise, design, build, deploy and test pragmatic security solutions that will give real and tangible benefits and security enhancement.
The Security Architect will design and review secure enterprise technology solutions spanning IT and OT. The role will translate regulatory, risk and compliance requirements into practical security architecture principles, control requirements and implementable solution designs. The architect will work with technical and non-technical stakeholders to challenge designs, identify security risks and support proportionate remediation decisions.
Your key responsibilities
Assess current IT and OT architectures, assets, interfaces, remote-access paths, data flows, dependencies, zones and conduits.
Develop secure current-state, target-state and solution architectures for enterprise IT and operational technology environments.
Review technology and project designs, identify security risks and recommend proportionate remediation options that balance security, safety, operational continuity, cost and delivery constraints.
Translate regulatory, risk and compliance obligations into practical security architecture principles, patterns, technical controls and solution requirements.
Apply relevant security architecture standards and frameworks, including IEC 62443 concepts such as zones, conduits and Security Levels, to OT architecture and control design.
Evaluate IT/OT integration points and define appropriate network segmentation, access control, remote-access, monitoring, logging and data-flow requirements.
Design and review industrial security monitoring and sensor architectures, including sensor placement, coverage, connectivity, integration and operational support requirements.
Assess architecture risks arising from legacy technologies, vendor dependencies, constrained patching, high-availability requirements and complex enterprise or industrial environments.
Produce clear, implementation-ready security architecture documentation, including Security Architecture Documents, high-level and low-level designs, architecture diagrams, control matrices, risk assessments, decision records and implementation requirements.
Work with control-system engineers, operations, infrastructure, application, cloud, security, risk, compliance and third-party stakeholders to resolve design issues and technical constraints.
Support security design governance, architecture review boards, security assurance, testing, risk-acceptance and design-approval decisions.
Skills and attributes for success
Strong collaboration skills, ideally working with global and multi-functional teams.
Ability to prioritise and work to tight deadlines and manage own caseload.
The ability to learn quickly and to work well under pressure,
The ability to listen attentively and express complex issues concisely to clients
Show leadership and motivate teams, including project management of consultancy projects
Participate in implementation or deployment of new tools, processes and best-practices in order to improve knowledge sharing and to raise security level while promoting security awareness among team members
To qualify for the role
Demonstrable experience designing and reviewing enterprise security architectures.
Practical experience defining technical controls and assessing security risks in complex solution designs.
Experience across both IT and OT environments, including the security dependencies between enterprise and operational systems.
Ability to translate regulatory, risk and compliance requirements into practical architecture principles, controls and designs.
Experience with security architecture frameworks or recognised architecture methods, including SABSA or equivalent.
Knowledge of IEC 62443 and secure architecture in industrial or operational environments.
Relevant security or architecture certification such as CISSP, CISM, SABSA or equivalent.
The following will be an advantage
CISSP or CISM (an advantage)
Relevant certification in IEC 62443, industrial cyber security, CISSP, CISM, SABSA or equivalent.
What we look for
Excellent communication and project management skills (verbal and written),
Excellent organisational and problem-solving skills in addition to strong attention to detail,
Experience in drafting proposals, bids and tender responses,
Excellent working knowledge of Microsoft PowerPoint, Word, Excel and online research tools,
What we offer
Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.
If you can demonstrate that you meet the criteria above, please contact us as soon as possible.
The exceptional EY experience. It’s yours to build.
Apply now.
Please note;
Prior to finalizing your application, you will be asked to provide personal information across several dimensions of diversity and inclusiveness. The information you provide is kept entirely confidential and will not be used to evaluate your candidacy. We collect this data to help us analyse our recruitment process holistically and implement actions that promote diversity and inclusiveness. While optional, we encourage you to provide this information to hold us accountable towards our goal of building a better working world. Read more about our commitment to diversity& inclusiveness here . We ask because it matters!
EY | Building a better working world
EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.
Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.
EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.
#2 MOST INCLUSIVE COMPANY
