Cybersecurity - Data Protection and Privacy - Senior - Consulting - Location OPEN

EY•Hartford, DC

21h•$104,800 - $218,500•Remote

About The Position

EY is seeking a Senior Consultant in their Cybersecurity practice, specializing in Data Protection & Privacy. This role involves developing data protection strategies and implementing solutions to ensure data security, privacy, and integrity for clients. The Cybersecurity Practice acts as a center of excellence, assisting consulting practices with large-scale initiatives and providing expertise in Cybersecurity best practices. The Data Protection & Privacy competency is crucial for supporting clients across various industry sectors. The role offers career-long training and coaching within a collaborative, global environment, working with advanced security tools to combat cybercrime and support business resilience.

Requirements

Bachelor's degree and approximately 2-3 years of related work experience; or a graduate degree and approximately 1-2 years of related work experience.
Approximately 2-3 years of technical architecture experience integrating data protection software into clients' infrastructure and applications.
Knowledge of general security concepts and methods such as vulnerability assessments, data classification, privacy assessments, incident response, security policy creation, enterprise security strategies, architectures, and governance.
Basic understanding of networking (TCP/IP, OSI model), operating system fundamentals (Windows, UNIX, mainframe), security technologies (firewalls, IDS/IPS, etc.) and application programming/scripting languages (C, Java, Perl, Shell).
Demonstrated experience in three or more of the following areas: Data leakage/content monitoring and filtering, Secure messaging/email encryption, Mobile device security, Disk, file, device, and database encryption, Key management/Public Key Infrastructure (PKI), Data classification and privacy policies, Digital Rights Management (DRM), Logging, monitoring, and security event management, Secure information storage.

Nice To Haves

Hold or be willing to pursue related professional certifications such as the CISSP, CISM, and/or CISA.
Basic understanding of regulatory requirements and compliance issues affecting clients related to privacy and data protection, such as PCI DSS, GLBA, Basel II, EU Data Protection Directive, International Cross Border, and U.S. State Data Privacy Laws.
Technical architecture experience integrating data protection software into clients' infrastructure; network architecture design, implementation and administration.
Working knowledge of operating systems, virtual machine environments, mainframe security packages, and relational database management systems.
Willingness to travel to meet client needs; travel is estimated at 60-80%.
Valid driver's license in the US and a valid passport required; willingness and ability to travel internationally.

Responsibilities

Help clients define technical and business requirements for data protection solutions.
Develop business processes and policies related to controlling access to data.
Help clients identify, understand, and protect their most critical data throughout the data lifecycle.
Identify high value assets.
Develop data classification schemes, standards, and guidelines.
Implement processes and technologies to provide leading data protection capabilities.
Implement and advise clients on multiple data protection products and solutions, including Enterprise data loss prevention, Data discovery, Data classification, Digital rights management, Cloud data loss prevention / cloud access security brokers, Tokenization, and File and database encryption.