Full Time
Security Consultant
Empresa: EY
Días de Trabajo: Lunes a Viernes
Lugar de Trabajo: Buenos Aires Hìbrido
Define security architectures and provide pragmatic security guidance that balance business benefit and risks.
Engage technology teams in order to evaluate and prescribe security controls at all touchpoints throughout the technology architecture
Define security configuration standards for platforms and technologies
Provide knowledge sharing and technical assistance to other team members
Act as Subject Matter Expert (SME) in responsible technologies and have deep technical understanding of responsible portfolios
Perform risk assessments of information systems and infrastructure
Maintain and enhance the Information Security risk assessment methodology
Develop appropriate risk treatment and mitigation options to address security risks identified during security review or audit
Translate technical vulnerabilities into business risk terminology for business units and recommend corrective actions to customers and project stake-holders
Five or more years of experience in security architecture, application security, networking, data center configuration, cloud technology, and the management of a significant Information Security risk functions
8 or more years of experience in an Information Security or Information Technology discipline
Experience in the Agile development lifecycle
Experience in managing the communication of security findings and recommendations to IT project teams and management
Exceptional judgment, tact, and decision-making ability
Flexibility to adjust to multiple demands, shifting priorities, ambiguity, and rapid change
Outstanding management, interpersonal, communication, organizational, and decision-making skills
Strong English language skills are required
Experience with cloud technology solutions, particularly MS Cloud
Experience in technologies such as block chain, RPA, AI, etc.
Knowledge of the Scaled Agile Framework
Certification requirements
Candidates are preferred to hold or be actively pursuing related professional certifications within the GIAC family of certifications or CISSP, CISM or CISA