Senior Consultant, Cyber, Cloud, FS

• Support the delivery of Cyber Security engagements, contributing to cloud and multi-cloud security solution design across AWS, Azure, and/or GCP.
• Assist with the configuration and integration of CNAPP/CSPM tools to establish secure baselines, continuous visibility, misconfiguration prevention, and vulnerability/exposure management.
• Participate in technical discovery and threat modelling for cloud-native architectures (containers, Kubernetes, serverless), translating findings into prioritised remediation actions and user stories.
• Contribute to the development of Statements of Work (SOWs), delivery plans, and effort estimates; support pre-sales activities including RFP responses, demos, and solution architecture workshops.
• Support engagement managers by producing high-quality deliverables, reviewing security configurations and policies, and ensuring work is completed on time and to EY quality standards.
• Contribute to the creation of accelerators such as reference architectures, templates, runbooks, and security blueprints to improve consistency and speed across engagements.
• Work with alliance partners and product vendors to build familiarity with cloud security tooling and emerging capabilities.
• Build strong working relationships with clients and internal EY stakeholders across Consulting and other service lines.

People Responsibilities

• Support the development of junior team members through coaching and knowledge sharing.
• Provide input into performance feedback and engagement reviews.
• Contribute to people initiatives such as recruitment, onboarding, and internal training for Cyber professionals.

• Experience supporting or advising Financial Services organisations on cyber security best practice and cloud security risks.
• Awareness of UK Financial Services security standards and regulatory expectations.
• Hands-on experience contributing to cloud security architecture and delivery initiatives.
• Solid architectural understanding across core cloud services (networking, IAM/workload identity, compute, containers, and data services) on at least one major cloud platform (ideally two).
• Practical exposure to CNAPP/CSPM platforms (e.g., Wiz, Prisma Cloud, Microsoft Defender).
• Foundational knowledge of Kubernetes security, including RBAC, workload identity, and container image security.
• Understanding of secrets management and machine identity.
• Strong written and verbal communication skills, with experience producing client-facing documentation and participating in technical discussions with both engineers and non-technical stakeholders.

• Experience working in consulting or complex, regulated environments.

• Ideally you’ll also have:
• Exposure to Data Security Posture Management (DSPM).
• Experience with Infrastructure as Code and Policy as Code.
• Relevant certifications in cloud platforms or security (e.g. AWS/Azure/GCP, CISSP, CCSP, Kubernetes)., Strong technical foundations in cloud security, exposure to UK Financial Services environments, and the motivation to grow into leadership roles. Comfortable working directly with clients, eager to learn, and proactive in contributing to team success.

• Competitive remuneration package with rewards for individual and team performance.
• Comprehensive Total Rewards package, including support for flexible working and career development.
• FlexEY benefits that can be tailored to suit your needs (holidays, health and well-being, insurance, savings and a wide range of discounts).
• Continuous learning: develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: tools and flexibility to make a meaningful impact, your way.
• Transformative leadership: insights, coaching, and confidence to be the leader the world needs.
• Diverse and inclusive culture: embraced for who you are and empowered to use your voice to help others find theirs.