EYRC-DR-Cloud Security Assessment-Senior
About this role
The opportunity
We’re looking for Senior Consultant with expertise in Cloud Security and Risk Assessment’ to lead the audit/review of security architecture and controls across hybrid cloud environments. This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the growth of our service offering.
Your key responsibilities
- Evaluate key cloud security solutions such as Cloud Security Posture Management (CSPM), Cloud Workload Protection Platforms (CWPP), Identity and Access Management (IAM), Cloud Access Security Brokers (CASB), Web Application Firewalls (WAF), Cloud encryption and key management services, Security Information and Event Management (SIEM), and security automation tools with respect to hybrid cloud security posture (AWS, Azure, GCP, and on-premises).
- Evaluate the effectiveness of the implementation and operations of vulnerability management and patching programs, including timely identification, prioritization, and remediation of cloud and on-premises vulnerabilities
- Evaluate security hardening standards and secure cloud configuration best practices across all environments.
- Assess AWS, Azure, and GCP environments against industry standards, regulatory requirements, and cloud security best practices.
- Review and design cloud security architectures, landing zones, network segmentation, identity and access management, privileged access management, encryption, and key management controls.
- Conduct cloud security strategy, maturity, governance, and target-state assessments to support cloud adoption and transformation initiatives.
- Perform technical security configuration reviews across cloud infrastructure, platforms, containers, Kubernetes, serverless services, and cloud-native security controls.
- Assess cloud security posture using CSPM and CNAPP solutions such as Microsoft Defender for Cloud, Prisma Cloud, or equivalent tools.
- Conduct cloud security audits, risk and compliance reviews, maturity assessments, and third-party or vendor security assessments.
- Develop actionable security improvement recommendations and prioritised roadmap strategies based on identified cloud risks, control gaps, and target-state objectives
- Evaluate DevSecOps implementation to embed security into CI/CD pipelines and cloud deployments.
- Evaluate the current practice followed of cloud security monitoring and incident management
- Conducting risk assessments and vulnerability analyses in cloud environments and propose mitigation strategies
- Support larger Internal Audit and Cyber security audits engagements especially on domains related to cloud security
- Develop cloud security policies/procedures to protect data in the cloud and prevent unauthorized access.
- Good understanding of cloud security standards/regulations globally and within the MENA region (KSA, UAE, Qatar)
- Communicate cloud security risks, strategies, and remediation plans clearly to technical teams and senior management
- Ability to translate complex technical details into clear, business-understandable language for effective communication with stakeholders/business users
Skills and attributes for success
- Strong technical knowledge of AWS, Azure, GCP, OCI and on-premises security architectures and controls.
- Proven ability to evaluate cloud security technologies, policies and processes.
- Experience conducting cloud risk assessments against global/MENA specific standards/regulations
- Experience managing cloud security metrics, reporting, and audit readiness.
- Excellent communication and stakeholder management skills.
- Experience in incident management and response in cloud environments.
- Familiarity with DevSecOps and secure CI/CD practices in Cloud
To qualify for the role, you must have
- 5–8 years of experience in cloud security, with hands-on expertise in hybrid and multi-cloud environments.
- Knowledge of CIS Benchmarks, NIST, ISO 27001, CSA CCM, and cloud security best practices.
- Experience leading client workshops, assessments, cloud security strategy engagements, and preparing executive-level reports and recommendations.
- Open to travel to MENA (up to 50% of the time)
- Excellent communication skills with consulting experience preferred
Ideally, you’ll also have
- A bachelor's or master's degree in B. TECH/B. E, MS in computer science, MBA (IT or Systems) or a related discipline.
- Certifications such as CCSP, CCSK, AZ-500, AWS Security Specialty, Google Professional Cloud Security Engineer, CISSP, or CISM preferred.
- Microsoft Certified: Azure Security Engineer Associate
- Google Cloud Professional Cloud Security Engineer)
What working at EY offers
At EY, we’re dedicated to helping our clients, from start–ups to Fortune 500 companies — and the work we do with them is as varied as they are.
You get to work with inspiring and meaningful projects. Our focus is education and coaching alongside practical experience to ensure your personal development. We value our employees and you will be able to control your own development with an individual progression plan. You will quickly grow into a responsible role with challenging and stimulating assignments. Moreover, you will be part of an interdisciplinary environment that emphasizes high quality and knowledge exchange. Plus, we offer:
- Support, coaching and feedback from some of the most engaging colleagues around
- Opportunities to develop new skills and progress your career
- The freedom and flexibility to handle your role in a way that’s right for you
EY | Building a better working world
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.
Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.
Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.
- Start applying with LinkedIn
- Apply Now Start
-
Please wait...
- Connect with us
- Our locations
- My EY
- Site map
- Legal and privacy
- Labor condition applications
- Cookie Consent Manager
-
Opens in a new tab.
-
Opens in a new tab.
-
Opens in a new tab.
-
Opens in a new tab.
-
Opens in a new tab.
EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.
×Cookie Consent Manager
When you visit any website, it may store or retrieve information on your browser, mostly in the form