资深信息安全专家

岗位职责

TheEYGlobalInformationSecurityteamislookingfornewmembershelpingmanagesecurityriskusingthelatesttechnologiesandinventingnewwaystowork.Ifyouareseekingapositionthatallowsyoutodemonstrateyourinformationsecurityskills,experienceandabilitytosolvecomplexproblems,thispositionisanopportunitytobeinvolvedembeddinginformationsecurityinmanynewprojectsasapartofEY’snewRegionalTechnologyHubpracticethatisintendedtoenableinnovation.KeyresponsibilitiesAsasecurityconsultantforEYGDSHubyouwillbeanindividualcontributorcapableofsupportingmultipleprojectteamsoperatinginthelatesttechnologiesofCloud-based,Agiledevelopedsystems,usingautomateddeploymentfromCI/CDpipelines.Inotherwords,itisnotjustanauditoroversightrole,butonethatrequiresdetailedparticipationinthedesign,implementation,andcertificationofsecuritycontrolsacrosssolutions.ThisrequiresknowledgeofvariousITsystemarchitectureandCloudtechnology,aswellassupportingtechnologiessuchasIAM,networksecurity,Kubernetes,useraccountmanagement,auditandlogging,andothersecurityconceptsasoutlinedinISO27001/2,OWASPandrelatedregionalsecuritystandards.Also,thesuccessfulcandidateshouldhaveknowledgeof3rdpartysecurityassessmentsandapplicabilityofSOC1andSOC2reports,andconceptsofvendorriskmanagement.SkillsandattributesforsuccessSignificantworkingsecurityexperienceandknowledgeinthedesign,implementationandoperationofsecuritycontrolsinoneormoreofthefollowingareas:• CloudSecurity–Technicalunderstandingofvirtualization,cloudinfrastructure,andpubliccloudofferingsandexperiencedesigningsecurityconfigurationandcontrolswithincloudbasedsolutionsinMicrosoftAzureandAzurePaaSservices(SQL,ServiceBus,ServiceFabric,DataLake,PowerBI),AliCloudandTencentCloudservices.• Agile&DevOpsMethodologies–ExperienceasacontributingmemberofabalancedteamwithinanAgiledevelopmentorDevOpsenvironment.• ApplicationSecurity-Experiencewiththedesignofsecuritycontrolsformulti-tierbusinesssolutionsincludingthedesignofapplication-levelaccessandentitlementmanagement,datatenancyandisolatio