Technology Consulting Cyber Security (Consultant to Senior)

At EY youll have the chance to build a career as unique as you are with the global scale support inclusive culture and technology to become the best version of you. And were counting on your unique voice and perspective to help EY become even better too. Join us and build an exceptional experience for yourself and a better working world for all.

To better reflect this The exceptional EY experience. Its yours to build. is our new promise to our people.

The opportunity

EY is committed to doing its part in building a better working world. The insights and quality services we deliver help build trust and confidence in the capital markets and in economies the world over. We develop outstanding leaders who team to deliver on our promises to all of our so doing we play a critical role in building a better working world for our people for our clients and for our communities.

Cybersecurity Team Provide end-to-end services to secure digital infrastructure and data including strategy design and implementation vulnerability testing compliance assurance and operational management

Your key responsibilities

• Perform cyber security and IT security assessments for clients (e.g. cyber security program assessment cyber security risk assessments IT network infrastructure reviews system technical configurations review information security policies and processes/procedures review etc.)
• Work on IT security design analysisand implementation of security protection solution.
• Evaluate and analyze threat vulnerability system weakness impact and risk to security issues discovered from security assessments like Vulnerability Assessment (VA) Penetration Testing (PenTest) etc.
• Advise clients on the security issues including explanation on the technical details and how they can remediate the vulnerabilities in the processes controls and systems.
• Advise client on the security incident response end-to-end process (i.e. preparation detection analysis response and recovery of the security incident).

Skills and attributes for success

To qualify for the role you must have

• Bachelors or Masters degree in Management Information Systems (MIS) Computer Engineering Computer Science Cybersecurity Information Systems IT Security ICT or a related field.
• Minimum 2 years of experience in cybersecurity IT security management IT security assessment IT audit or related areas.
• Experience in cybersecurity assessment frameworks and standards such as NIST Cybersecurity Framework (NIST CSF) ISO/IEC 27001 IT Audit or other related methodologies.
• Familiarity with leading cybersecurity processes frameworks and security tools.
• Strong technical background in information security including security design implementation and assessment.
• Experience in project planning and project management would be an advantage.
• Experience in modern cybersecurity practices such as DevSecOps penetration testing red teaming and system resilience design.
• Knowledge of emerging technologies and their security implications including Cloud Computing Blockchain Big Data Artificial Intelligence (AI) and Machine Learning (ML).
• Professional certifications are preferred such as Certified Information Systems Auditor (CISA) Certified Information Security Manager (CISM) ISO/IEC 27001 Lead Auditor Certified Ethical Hacker (CEH) Certified Information Systems Security Professional (CISSP) or Offensive Security Certified Professional (OSCP).
• Highly proficient in both Thai and English with excellent written and verbal communication analytical and problem-solving skills.

Ideally youll also have

• Having experience in project planning and management will be a plus.
• Professional certifications such as Offensive Security Certified Professional (OSCP) Certified Ethical Hacker (CEH)Certified Information Systems Security Professional (CISSP) and / or Certified Information Systems Auditor (CISA) Certified Information Security Manager (CISM) or ISO27001 will be highly considered
• Experience in new generation security practices (i.e. DevSecOps iPentest RedTeaming System Resilience Design)
• Experience in Emerging Technologies (i.e. Cloud Computering Blockchain Big Data A.I./M.L.)

What we look for

Were interested in intellectually curious people with a genuine passion for cyber security. With your specialization in attack and penetration testing well turn to you to speak up with innovative new ideas that could make a lasting difference not only to us but also to the industry as a whole. If you have the confidence in both your presentation and technical abilities to grow into a leading expert here this is the role for you.

What we offer

We offer a competitive remuneration package. Our comprehensive Total Rewards package includes support for flexible working and career development covering holidays health and well-being insurance savings and a wide range of discounts offers and promotions.

• Continuous learning: Youll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: Well provide the tools and flexibility so you can make a meaningful impact your way.
• Transformative leadership: Well give you the insights coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: Youll be embraced for who you are and empowered to use your voice to help others find theirs.

If you can demonstrate that you meet the criteria above please contact us as soon as possible.

The exceptional EY experience. Its yours to build.

EY Shape The Future with Confidence

EY exists to build a better working world helping to create long-term value for clients people and society and build trust in the capital markets.

Enabled by data and technology diverse EY teams in over 150 countries provide trust through assurance and help clients grow transform and operate.

Working across assurance consulting law strategy tax and transactions EY teams ask better questions to find new answers for the complex issues facing our world today.