EY is seeking a Senior Information Security Engineer for their Cyber Security team in Noida, India. This role is within the EKM (Enterprise Key Management) Consulting team, focusing on Public Key Infrastructure (PKI) and certificate lifecycle management.
As a Senior Lead Info Security Engineer, you will be part of a team of subject matter experts dedicated to protecting data at rest, in-transit, or in-use through robust systems, processes, technologies, and policies.
The Opportunity
Join the Risk Consulting team as a Security Analyst working on diverse privacy and data protection projects for global clients. You will ensure the highest quality of work, adhering to EY's quality standards. As an influential team member, you will foster a positive learning environment, coaching and mentoring junior colleagues.
Key Responsibilities
- Design, develop, integrate, and deploy encryption and key management solutions (on-premise and cloud).
- Define business/technical strategies to reduce risk and enhance the security posture of applications, platforms, and infrastructure.
- Collaborate with stakeholders to understand security needs and prioritize roadmaps.
- Ensure project completion on time, within budget, and to high quality standards.
- Support compliance activities, ensuring adherence to system security configuration guidelines and monitoring.
- Develop runbooks, SOPs, and troubleshooting guides.
- Continuously validate products and solutions against policies, guidelines, procedures, and regulations.
- Provide client team support by acting as an interim team member (e.g., security officer, manager, analyst).
Skills and Attributes for Success
- Team player with excellent verbal and written communication skills.
- Proficient in documentation and PowerPoint.
- Strong social, communication, and technical writing skills.
- Ability to interface effectively with internal and external clients.
- Strong analytical and problem-solving skills.
- Ability to prioritize tasks and work accurately under pressure to meet deadlines.
- Understanding and adherence to workplace policies and procedures.
- Independent project/engagement management with minimal oversight.
Qualifications
- Bachelor's or Master's degree in Computer Science, Information Systems, Engineering, or a related field.
- Minimum 7+ years of experience in Information Security.
- Minimum 5+ years of relevant experience.
- Subject matter expertise in PKI, CLM, and HSM.
- Excellent scripting skills.
- Experience developing SOPs, runbooks, and CP/CPS.
- 7+ years of technical experience with a combination of 2 or more services (CLM, KMS, PKI).
- 5+ years of experience with both Linux and Windows systems.
- 2+ years of working experience in cloud technologies (AWS, Azure, Google Cloud Platform).
- Experience with Venafi, AppViewX CERT+, Luna HSM, Fortanix DSM, MS-PKI, Sectigo.
- 3+ years of experience in writing requirements for security technologies.
- Current data protection and privacy expertise, skills, and competences.
- Ability to independently research and solve technical issues.
- Demonstrated integrity in a professional environment.
- Knowledge of core Information Security concepts (Governance, Risk & Compliance).
- Ability to adapt to a changing environment.
- Ability to communicate clearly and concisely.
Preferred Qualifications
- Data tokenization/Data Masking experience.
- Proven experience leading high-performing technical teams.
- Security certifications (CISSP, CISM, CRISC, AWS, Azure, SANS, etc.).
- Strong customer service skills.
- Willingness to work some weekends and travel 20%-30%.
What EY Offers
EY provides opportunities to work on inspiring and meaningful projects, with a focus on education, coaching, and practical experience. We offer an individual progression plan for personal development, enabling rapid growth into responsible roles with challenging assignments. Be part of an interdisciplinary environment that emphasizes high quality and knowledge exchange. Benefits include supportive coaching, opportunities for skill development, career progression, and the flexibility to manage your role.
EY is committed to building a better working world by creating long-term value for clients, people, and society, and building trust in capital markets. Enabled by data and technology, EY teams in over 150 countries provide trust through assurance and help clients grow, transform, and operate. Working across assurance, consulting, law, strategy, tax, and transactions, EY teams ask better questions to find new answers to complex global issues.
