RC-DR-Cloud Security Assessment-Senior Professional

Job Summary

EY-Digital Risk - Cloud Security

As part of our Risk Consulting, you will be joining the Digital Risk Consulting Team.

The opportunity

We're looking for Senior Consultant with expertise in Cloud Security and Risk Assessment to lead the audit/review of security architecture and controls across hybrid cloud environments. This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the growth of our service offering.

Your key responsibilities

• Evaluate key cloud security solutions such as Cloud Security Posture Management CSPM, Cloud Workload Protection Platforms CWPP, Identity and Access Management IAM, Cloud Access Security Brokers CASB, Web Application Firewalls WAF, Cloud encryption and key management services, Security Information and Event Management SIEM, and security automation tools with respect to hybrid cloud security posture AWS, Azure, GCP, and on-premises.
• Evaluate the effectiveness of the implementation and operations of vulnerability management and patching programs, including timely identification, prioritization, and remediation of cloud and on-premises vulnerabilities
• Evaluate security hardening standards and secure cloud configuration best practices across all environments.
• Assess AWS, Azure, and GCP environments against industry standards, regulatory requirements, and cloud security best practices.
• Review and design cloud security architectures, landing zones, network segmentation, identity and access management, privileged access management, encryption, and key management controls.
• Conduct cloud security strategy, maturity, governance, and target-state assessments to support cloud adoption and transformation initiatives.
• Perform technical security configuration reviews across cloud infrastructure, platforms, containers, Kubernetes, serverless services, and cloud-native security controls.
• Assess cloud security posture using CSPM and CNAPP solutions such as Microsoft Defender for Cloud, Prisma Cloud, or equivalent tools.
• Conduct cloud security audits, risk and compliance reviews, maturity assessments, and third-party or vendor security assessments.
• Develop actionable security improvement recommendations and prioritised roadmap strategies based on identified cloud risks, control gaps, and target-state objectives
• Evaluate DevSecOps implementation to embed security into CI CD pipelines and cloud deployments.
• Evaluate the current practice followed of cloud security monitoring and incident management
• Conducting risk assessments and vulnerability analyses in cloud environments and propose mitigation strategies
• Support larger Internal Audit and Cyber security audits engagements especially on domains related to cloud security
• Develop cloud security policies procedures to protect data in the cloud and prevent unauthorized access.
• Good understanding of cloud security standards regulations globally and within the MENA region KSA, UAE, Qatar
• Communicate cloud security risks, strategies, and remediation plans clearly to technical teams and senior management
• Ability to translate complex technical details into clear, business understandable language for effective communication with stakeholders business users

Skills and attributes for success

• Strong technical knowledge of AWS, Azure, GCP, OCI and on-premises security architectures and controls.
• Proven ability to evaluate cloud security technologies, policies and processes.
• Experience conducting cloud risk assessments against global MENA specific standards regulations
• Experience managing cloud security metrics, reporting, and audit readiness.
• Excellent communication and stakeholder management skills.
• Experience in incident management and response in cloud environments.
• Familiarity with DevSecOps and secure CI CD practices in Cloud

To qualify for the role, you must have

• 5-8 years of experience in cloud security, with hands-on expertise in hybrid and multi-cloud environments.
• Knowledge of CIS Benchmarks, NIST, ISO 27001, CSA CCM, and cloud security best practices.
• Experience leading client workshops, assessments, cloud security strategy engagements, and preparing executive-level reports and recommendations.
• Open to travel to MENA up to 50% of the time
• Excellent communication skills with consulting experience preferred

Ideally, you ll also have

• A bachelors or masters degree in B TECH/B E, MS in computer science, MBA (IT or Systems) or a related discipline.
• Certifications such as CCSP, CCSK, AZ-500, AWS Security Specialty, Google Professional Cloud Security Engineer, CISSP, or CISM preferred.
• Microsoft Certified: Azure Security Engineer Associate
• Google Cloud Professional Cloud Security Engineer

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.