Senior Information Security Consultant

Responsibilities

• Design, develop, and implement security controls for market-leading regional and global systems, primarily focused on Cloud technologies.
• Act as an individual contributor within an Agile and DevOps environment, participating in the design, implementation, and certification of security controls.
• Support multiple project teams using automated deployment from CI/CD pipelines.
• Integrate infrastructure security technologies including IAM, intrusion detection, prevention, security monitoring, and data encryption.
• Apply security concepts across various architectures, including Kubernetes, REST APIs, and microservices.
• Manage security for multi-tier business solutions, including application-level access, data tenancy, and isolation.

Requirements

• Significant experience implementing security in a Microsoft Azure Cloud environment, specifically with PaaS and SaaS architectures.
• Direct knowledge of IT system architecture and Cloud technology, including IAM, network security, firewalls, and audit/logging.
• Proficiency with security standards such as ISO27001/2 and OWASP.
• Advanced degree in Computer Science or a related discipline, or equivalent professional work experience.
• Fluency in both Italian and English.
• Strong communication skills with the ability to engage stakeholders from developers to business leaders.

Preferred Qualifications

• Relevant security certifications such as CISSP, CCSP, CISM, or AZ-500 Azure Security Engineer.
• Previous experience working within a Big 4 or large consulting firm.
• Experience with operational security models and maintaining infrastructure/application security controls.
• Knowledge of CSA and CIS Controls.
• Experience in Product Management, specifically regarding security throughout the product lifecycle.

About the Company

EY is a global leader in professional services, dedicated to building a better working world. Our Global Information Security team helps clients harness the power of emerging technologies by managing security risk through innovation and advanced technical capabilities.