Senior Cyber Security Consultant – Cloud & AI

About the role

Ernst & Young is seeking a Senior Consultant to help financial services clients secure their cloud and AI environments. You will work with an internationally connected team to assess, design and improve security across cloud platforms, AI solutions and enterprise architectures.

Key responsibilities

• Participate in cyber security engagements focused on cloud security, AI security, security architecture assessment and configuration review for financial services clients.
• Assess cloud environments and solution designs against security best practices, client requirements and regulatory expectations, covering IAM, network security, data protection, encryption, logging, monitoring, workload protection and resilience.
• Review technology configurations, identify control gaps, validate findings with technical stakeholders and provide risk‑based remediation recommendations.
• Evaluate the security of AI solutions, including governance, access control, data protection, model interfaces, secure development and third‑party dependencies.
• Develop and review security architectures, principles, standards and patterns for cloud, AI, application, infrastructure and hybrid environments.
• Support threat modelling, security design reviews and architecture risk assessments throughout the solution lifecycle.
• Conduct interviews and workshops with business, technology, risk and security stakeholders and translate technical findings into concise business impacts and actionable recommendations.

Required profile

• Senior‑level experience in cyber security consulting, preferably within the financial services sector.
• Proven ability to assess and improve security for cloud platforms and AI‑enabled solutions.
• Strong analytical skills with a track record of delivering clear, actionable recommendations to clients.

Required skills

• Cloud security
• AI security
• Security architecture assessment
• Identity and Access Management (IAM)
• Network security
• Data protection
• Encryption
• Logging and monitoring
• Workload protection
• Threat modelling
• Security design reviews
• Architecture risk assessments