2 Controls Concepts Jobs

At EY, you'll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture, and technology to become the best version of you. And we're counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. As part of our EY Cyber Security team, you shall be responsible for defining, solutioning, integrating, and implementing innovative solutions which will enhance our service delivery quality, as well as help us strategically elevate technology-driven transformation for our clients. You'll also help to create a positive learning culture, coach and counsel junior team members, and help them to develop. We're looking for an Infrastructure Security professional with a solution mindset and hands-on security engineering expertise in network security concepts, risk and controls concepts, architecture design. This is a fantastic opportunity to be part of a leading firm while being instrumental in the rollout of next-generation market-relevant solutions. Your key responsibilities include being a Security- Design & Architect professional who is responsible for designing, building, testing, and implementing network security systems within an organization's IT network - On-Prem & Cloud. You are expected to have a thorough understanding of complex IT systems, stay up to date with the latest security standards, systems, and authentication protocols, as well as best practice security products. You will identify requirements, design documents, and implement technical solutions for scalable and resilient network architecture. Experience in building networks by considering various factors like bandwidth requirements, infrastructure requirements, and security is crucial. You should possess experience in planning, design, deployment, configuration, integration, and management of network protection controls including Next-gen firewalls such as Palo Alto, Checkpoint, Fortinet, SDN Security, DDoS Protection, IPS, VPN, Wireless security, NAC, and network authentication solutions to protect IT assets. You will be responsible for the deployment of any changes, plug-ins, or configurations as requested by the client. Additionally, you will plan, design, deploy, configure, integrate, and manage WAF, proxy/Zscaler solutions, platform protection controls, and virtualization protection solutions on Hypervisors and thin clients security solutions. A good understanding of security concepts and technologies including TCP/IP, LDAP, DHCP, DNS, web filtering, etc., is required. You should be well-versed with network documentation that includes network drawings, text descriptions, equipment configurations, designing HLDs, and LLDs. To qualify for the role, you must have at least 6 years of experience in Information Technology with specialization in Cyber Security roles including multiple areas of specialization. You should have professional-level knowledge in Security Engineering & Architecture assessments, hands-on experience in firewalls, VPNs, NAC, SDWAN, WAF, Proxy, EDR/XDR, etc., expert-level experience with deployment, maintenance, and operations of one or more major network security devices, knowledge in Zero Trust Design, Cloud Security Architecture, and an entrepreneurial approach to solving security problems with consultative skills. Skills and attributes for success include serving as a highly technical security expert to bring security transformation to both new and legacy infrastructure, deep technical understanding of architecture and solutioning of infrastructure security components, deep knowledge of services and service delivery approach and methodology for infrastructure security including governance and operating models, proven track record in building and maintaining trusted relationships with key internal and external stakeholders, willingness to travel and flex work timings as required, ability to adapt in a hyper-growth environment, self-starter and strategic thinker, drive C-suite/senior leadership level meetings and discussions, excellent oral and written communication skills and executive presence enabling effective engagement with senior stakeholders, ability to work independently and communicate technical and security-related issues to client/business stakeholders, leveraging creative thinking and problem-solving skills, individual initiative, utilizing Office 365, MS Office (Word, Excel, Access, PowerPoint), and Google Docs, communicating in an organized and knowledgeable manner in written and verbal formats including delivering clear requests for information and communicating potential conflicts, consistently driving objectives relying on fact-based decisions about risk that optimize the trade-off between risk mitigation and business performance, good presentation, project management, facilitation, and delivery skills, strong analytical and problem-solving capabilities, ability to create domain-specific training content and deliver training effectively, developing/implementing automation solutions and capabilities aligned to client business, technology, and threat posture, and demonstrating the ability to track developments and changes in the digital business and threat environments to ensure they're adequately addressed in clients" security strategy plans and architecture artifacts. Ideally, you'll also have good soft skills including verbal & written communication, technical document writing, strong project management, negotiation, and interpersonal skills, prior experience working in Advisory or Technology Consulting industry, customer orientation skills, and relevant certifications such as CCNA, CISSP, CCIE, or Vendor-specific certifications (Zscaler, Palo Alto, Cisco, etc). At EY, we're dedicated to helping our clients, from startups to Fortune 500 companies, and the work we do with them is as varied as they are. You get to work with inspiring and meaningful projects. Our focus is education and coaching alongside practical experience to ensure your personal development. We value our employees, and you will be able to control your own development with an individual progression plan. You will quickly grow into a responsible role with challenging and stimulating assignments. Moreover, you will be part of an interdisciplinary environment that emphasizes high quality and knowledge exchange. Plus, we offer support, coaching, and feedback from engaging colleagues, opportunities to develop new skills and progress your career, and the freedom and flexibility to handle your role in a way that's right for you. EY exists to build a better working world, helping to create long-term value for clients, people, and society, and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform, and operate. Working across assurance, consulting, law, strategy, tax, and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.,

At EY, you'll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture, and technology to become the best version of you. And we're counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. As part of our EY Cyber Security team, you shall be responsible for defining, solutioning, integrating, and implementing innovative solutions which will enhance our service delivery quality, as well as help us strategically elevate technology-driven transformation for our clients. You'll also help to create a positive learning culture, coach and counsel junior team members, and help them to develop. We're looking for an Infrastructure Security professional with a solution mindset and hands-on security engineering expertise in network security concepts, risk and controls concepts, and architecture design. This is a fantastic opportunity to be part of a leading firm while being instrumental in the rollout of next-generation market-relevant solutions. Your key responsibilities include: - Designing, building, testing, and implementing network security systems within an organization's IT network, both On-Prem and Cloud. - Staying up to date with the latest security standards, systems, and authentication protocols, as well as best practice security products. - Identifying requirements, designing documents, and implementing technical solutions for scalable and resilient network architecture. - Experience in planning, designing, deploying, configuring, integrating, and managing network protection controls including Next-gen firewalls (Palo Alto, Checkpoint, Fortinet), SDN Security, DDoS Protection, IPS, VPN, Wireless security, NAC, and network authentication solutions. - Planning, designing, deploying, configuring, integrating, and managing WAF, proxy/Zscaler solutions. - Planning, designing, deploying, configuring, integrating, and managing platform protection controls including virtualization protection solutions on Hypervisors and thin clients security solutions. - Demonstrating a good understanding of security concepts and technologies including TCP/IP, LDAP, DHCP, DNS, web filtering, etc. - Being well-versed in network documentation that includes network drawings, text descriptions, equipment configurations, designing HLDs, and LLDs. Skills and attributes for success: - Serving as a highly technical security expert to bring security transformation to both new and legacy infrastructure. - Having a deep technical understanding of architecture and solutioning of infrastructure security components. - Demonstrating a deep knowledge of services and service delivery approach and methodology for infrastructure security. - Building and maintaining trusted relationships with key internal and external stakeholders. - Being willing to travel and flex work timings as required. - Ability to change and adapt in a hyper-growth environment. - Being a self-starter and strategic thinker. - Driving C-suite/senior leadership level meetings and discussions. - Demonstrating excellent oral and written communication skills and executive presence that enable effective engagement with senior stakeholders. - Ability to work independently and communicate technical and security-related issues to client/business stakeholders. - Leveraging creative thinking and problem-solving skills, individual initiative, and utilizing various tools including Office 365, MS Office (Word, Excel, Access, PowerPoint), and Google Docs. - Communicating in an organized and knowledgeable manner in written and verbal formats. - Making fact-based decisions about risk that optimize the trade-off between risk mitigation and business performance. - Having good presentation, project management, facilitation, and delivery skills, as well as strong analytical and problem-solving capabilities. - Ability to create domain-specific training content and deliver training effectively. - Developing/Implementing automation solutions and capabilities aligned to client business, technology, and threat posture. - Tracking developments and changes in the digital business and threat environments to ensure they're adequately addressed in clients" security strategy plans and architecture artifacts. To qualify for the role, you must have: - 6+ years of experience in Information Technology experience, with specialization in Cyber Security roles. - Professional-level knowledge in Security Engineering & Architecture assessments. - Strong hands-on experience in firewalls, VPNs, NAC, SDWAN, WAF, Proxy, EDR/XDR, etc. - Expert-level experience with deployment, maintenance, and operations of major network security Devices. - Zero Trust Design knowledge. - Cloud Security Architecture experience. - Entrepreneurial approach to solving security problems with consultative skills. Ideally, you'll also have: - Good soft skills i.e., verbal & written communication, technical document writing, etc. - Strong project management, negotiation, and interpersonal skills. - Prior experience working in Advisory or Technology Consulting industry. - Customer orientation skills. - Certifications like CCNA, CISSP, CCIE, or Vendor-specific certifications (Zscaler, Palo Alto, Cisco, etc). EY offers: - Support, coaching, and feedback from engaging colleagues. - Opportunities to develop new skills and progress your career. - Freedom and flexibility to handle your role in a way that's right for you. EY is dedicated to building a better working world, creating long-term value for clients, people, and society, and building trust in the capital markets. EY teams provide trust through assurance and help clients grow, transform, and operate across various services.,