Cloud Security Consultant

At EY, we’re all in to shape your future with confidence. 

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. 

Join EY and help to build a better working world.

Nāu te rourou, nāku te rourou, ka ora ai te iwi

With your contribution and my contribution, together we will thrive.

Hei Oranga Iwi | The opportunity

This is a hybrid position is based in our Tāmaki Makaurau (Auckland)

Join a growing Cyber Security team helping organisations navigate an increasingly complex  threat landscape and securely deliver cloud services, enterprise platforms, technology  solutions and business transformation initiatives. 

As a Cloud Security Consultant, you will work with clients to assess security risks, 
strengthen cloud security capabilities and support the secure delivery of technology  transformation programs. You will provide practical security advice across cloud, identity,  network, application and enterprise security domains while helping organisations improve  their security posture and resilience. 

This opportunity is ideal for a cyber security professional with 4-6 years' experience  supporting enterprise cloud environments and technology transformation initiatives. You  will have the opportunity to deepen your expertise across cloud security, secure  architecture, identity and access management and modern security practices including  DevSecOps and cloud governance. 

Working closely with Solution Architects, Security Architects, Principal Architects and  engineering teams, you will assess enterprise platforms, solutions and services to identify  risks, recommend improvements and support secure business outcomes. . 

Ko Tō Rourou | Your key responsibilities 

• Partner with business and project teams to assess solutions and ensure alignment with security standards, policies and regulatory requirements. 

• Perform cloud security assessments, architecture reviews and confifiguration reviews across Microsoft Azure, AWS and Google Cloud Platform (GCP). 

• Assess cloud-native security controls across identity, networking, encryption, logging, monitoring, access management and data protection domains. 

• Review solution architectures and Solution Architecture Documents (SADs) to identify security risks, control gaps and opportunities for improvement. 

• Conduct threat modelling activities using established methodologies such as STRIDE and support secure-by-design outcomes.