Senior Cybersecurity Consultant

About the Role:

EY Israel’s Advanced Security Center (ASC) provides a broad range of cybersecurity services to cross-industry clients around the globe.

As a Cybersecurity Consultant within our Defensive Security team, you will play a key role in shaping and enhancing our clients' cybersecurity posture.

This position is hybrid!

Key Responsibilities:

Responsibilities will include to –

Manage end-to-end delivery of client engagements, from scoping through execution, providing support for cyber resiliency, risk assessment, and strategic advisory services
Collaborate on internal innovation initiatives, contribute to the development of new service offerings and the enhancement of existing service methodologies

Your Experience:

You have -

Three to five years’ experience working in cybersecurity, with a solid foundation in governance, risk, and compliance
A firm understanding of IT and business process and technology landscapes and are comfortable discussing technical concepts (e.g., networking, cloud technologies)
A deep understanding of cyber risk assessment and risk management, and familiarity with relevant industry standards and frameworks (NIST, ISO, etc.)
Preferred: Demonstrated working knowledge of at least one of the following – SSDLC, threat modelling, data privacy, cloud security, network architecture security

Additional Skills:

You have strong analytical and critical reasoning skills
You are growth-oriented and a self-motivated and independent learner
You have a strong ability to work collaboratively within a team and build relationships
You are organized and proactive, with strong project management skills and a proven ability to manage concurrent projects and deliver results within budget and on time
You have strong verbal and written communication skills (English and Hebrew)
You are comfortable taking a client-facing role and can effectively convey technical concepts to non-technical stakeholders
A degree in a relevant field or relevant industry certifications (e.g., CISSP, CISM) are preferred, but equivalent experience / industry-specific learning will be considered