Cyber - PKI Engineer - Senior - Consulting

EY•Hartford, DC

3d•$104,800 - $218,500•Hybrid

About The Position

Cyber threats, social media, massive data storage, privacy requirements and continuity of the business as usual require heavy information security measures. As an information security specialist, you will lead the implementation of security solutions for our clients and support the clients in their desire to protect the business. You will belong to an internationally connected team of specialists helping our clients with their most complex information security needs and contributing toward their business resilience. You will be working with our Advanced Security Centers to access the most sophisticated tools available to fight against cybercrime. EY’s Cybersecurity practice functions as a center of excellence to assist our National Consulting practices in planning, pursuing, delivering, and managing large, complex full lifecycle initiatives along with providing expertise in leading practices, methods, and resources in the space of Cybersecurity. The Data Protection & Privacy (DPP) capability within the Cybersecurity practice is a critical competency that supports our clients across all industry sectors. We currently are seeking a highly motivated individual to manage client engagement teams, work with a wide variety of clients to deliver professional services and manage business development activities on strategic and global priority accounts. We will support you with career-long training and coaching to develop your skills. As EY is a leading global service provider in this space, you will be working with the best of the best in a collaborative environment. So, whenever you join, however long you stay, the exceptional EY experience lasts a lifetime.

Requirements

Bachelor's degree and approximately 4-6 years of related work experience; or a graduate degree and approximately 3-5 years of related work experience.
Approximately 3-5 years of technical architecture experience integrating data protection software into clients' infrastructure and applications.
Knowledge of general security concepts and methods such as and methods such as encryption, data disposition, data classification, security policy creation, enterprise security strategies, architectures, and governance.
Basic understanding of course-grain and fine-grain encryption and key management capabilities.
Basic understanding of how to protect client’s data throughout the data lifecycle and effectively dispose of data at the end of its life using a variety of techniques, including tokenization, encryption, anonymization, and deletion.
Technical architecture experience integrating data encryption and security tools into clients' infrastructure; network architecture design, implementation, and administration.
Understanding of data governance and data lifecycle management.
Knowledge and experience with data management pertaining to Data Privacy, Protection and Lifecycle
Understanding of data discovery tools (e.g., Collibra, Informatica, BigID, Microsoft etc)

Nice To Haves

The successful candidate must hold or be willing to pursue related professional certifications such as CISSP, CISM, and/or CISA.
EDMC DCAM certification a plus, but not prerequisite.
Technical architecture experience integrating data protection software into clients' infrastructure; network architecture design, implementation, and administration.
Working knowledge of operating systems, virtual machine environments, mainframe security packages, and relational database management systems.
Willingness to travel to meet client needs; travel is estimated at up to 40-60%.
Valid driver's license in the US and a valid passport required; willingness and ability to travel internationally.

Responsibilities

Help clients define technical and business requirements for data security solutions as well as develop business processes and policies related to controlling access to data.
Show demonstrated experience in managing teams and developing data security strategies as well as implementing solutions to provide data security and integrity.
Help clients to identify, understand and protect their most critical data throughout the data lifecycle.
Implement and advise clients on multiple data security products and solutions, including Encryption and Key management, PKI and Certificate management, Cryptographic program strategy and development, Data disposition solution strategy and implementation, Data anonymization and pseudonymization, Cryptographic vendor selection, Cryptographic technology implementation, Post-quantum encryption strategy and discovery, Data Governance strategy and roadmap, operating model, and policies/standards/process.
Consistently deliver quality client services. Monitor progress, manage risk, and ensure key stakeholders are kept informed about progress and expected outcomes.
Stay abreast of current business and industry trends relevant to the client's business.
Establish relationships with client personnel at appropriate levels.
Demonstrate in-depth technical capabilities and professional knowledge.
Demonstrate ability to assimilate to new knowledge.
Possess good business acumen.
Remain current on new developments in consulting services capabilities and industry knowledge.