Senior Manager - Infrastructure Security and Cybersecurity Operations

EY- Cyber Security – Technology Consulting – Infrastructure Security – Managed Services - Senior Manager

As part of our EY Cyber Security team, you shall be responsible for defining, solutioning, integrating, and implementing innovative solutions which will enhance our service delivery quality, as well as help us strategically elevate technology driven transformation for our clients. You’ll also help to create a positive learning culture, coach and counsel junior team members and help them to develop.

Infrastructure Security – Network Security, Cloud Security and Endpoint Security

The opportunity

We’re looking for an Infrastructure Security professional with solution mindset and hands on security engineering expertise in network, cloud, endpoint security concepts, with experience in transition, run and operations. Person should have knowledge on run and maintenance of various Network Security, Cloud Security and Endpoints under managed services to cater service operations for Firewall, WAF (Web application firewall, NAC (Network Access Control), Proxy, Cloud, Email Security, endpoint security and Antivirus. Additionally, the candidate must be well versed in ITSM processes and have complete understanding of the Service management to run operate and deliver. This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the rollout of next generation market relevant solutions.

Your key responsibilities

Professional should have knowledge on run and maintenance of various Network Security, Cloud Security and Endpoint like Firewall, WAF (Web Application Firewall), NAC (Network Access Control), Email Security, Antivirus solutions and Proxies.

• The candidate must be well versed in ITSM processes and have complete understanding of the Service management to run operate and deliver.
• Understanding on ITIL frameworks
• Service Delivery Management
• Technical Oversight and Governance
• Team Leadership and Development
• Financial and Operational Management
• Collaboration and Stakeholder Management
• Professional who is responsible for managed Services (Operations), building, testing and configuring Network security, Endpoint and Cloud systems within an organisation’s IT network- On Prem & Cloud.
• Professional is expected to have a thorough understanding of complex IT systems and stay up to date with the latest security standards, systems and authentication protocols, as well as best practice security products.
• Should be well-versed in developing standard SOPs (Standard Operating Procedures) Work flows, maintain process related documents.
• Professional should have clear understanding of Configuration and incident management principles
• Experience in building the networks by taking into consideration various factors like, bandwidth requirements, infrastructure requirements and security.
• Individual should possess experience in planning, deployment, configuration, integration and management of network protection controls including Next gen firewalls- Palo Alto, Cisco Firewalls, SDN Security, DDoS Protection, IPS, VPN, Wireless security, NAC and network authentication solutions to protect IT assets and should be responsible for deployment of any changes, plug-ins, or configuration as requested by client.
• Possess hands on experience in segmenting networks, applications, and data to limit exposure to attacks.
• Must possess knowledge on all network security controls, troubleshoot and relate technical scenarios
• Plan, deploy, configure, integrate and manage platform protection controls including virtualisation protection solutions on Hypervisors and thin client’s security solutions.
• Good understanding of security concepts and technologies including, but not limited to TCP/IP, LDAP, DHCP, DNS, web filtering, and wireless etc.
• Ensure adherence to industry standards, regulatory requirements, and best practices.
• Ensure compliance with service level agreements (SLAs) and key performance indicators (KPIs).
• Drive innovation and develop continuous improvement (CI/CD) in service delivery and security solutions.
• Develop and implement the overall strategy for the Infrastructure Security Managed Service stream.

Skills and attributes for success

• Serve as highly technical security expert to bring security transformation to both new and legacy infrastructure.
• Deep technical understanding of architecture and solutioning of infrastructure security components.
• Deep knowledge of services and service delivery approach and methodology for infrastructure security including governance and operating models.
• Proven track record in building and maintaining trusted relationships with key internal and external stakeholders.
• Willingness to travel and flex work timings as and when required.
• Ability to change and adapt in a hyper-growth environment.
• Self-starter and strategic thinker.
• Drive C-suite/senior leadership level meetings and discussion.
• Excellent oral and written communication skills and executive presence that enable effective engagement with senior stakeholders.
• Ability to work independently and communicate the technical and security related issues to client/business stakeholders.
• Clearly demonstrates proven extensive abilities with leveraging creative thinking and problem-solving skills, individual initiative, and utilizing Office 365, MS Office (Word, Excel, Access, PowerPoint) and Google Docs.
• Communicating in an organized and knowledgeable manner in written and verbal formats including delivering clear requests for information and communicating potential conflicts.
• Must communicate consistently and drive objectives, relying on fact-based decisions about risk that optimize the trade-off between risk mitigation and business performance.
• Good presentation, project management, facilitation and delivery skills as well as strong analytical and problem-solving capabilities.
• Ability to create domain specific training content and deliver training effectively.
• Develop/Implement automation solutions and capabilities that are clearly aligned to client business, technology and threat posture.
• Demonstrates ability to track developments and changes in the digital business and threat environments to ensure that they're adequately addressed in client’s security strategy plans and architecture artefacts.

To qualify for the role, you must have

• 14-18 years of experience in Information Technology experience, with specialization in Cyber Security roles that include multiple areas of specialization. Professional-level knowledge in areas from the following:
• Security Run and maintenance & Implementation
• Strong hands-on exp. In Cloud or On prem solutions like firewalls, VPNs, NAC, SDWAN, WAF, Proxy, EDR, email Security, Wireless and networks etc.
• Expert level experience with deployment, maintenance and operations of one or more major network security Devices
• Cloud Security Architecture
• Entrepreneurial approach to solving security problems with consultative skills
• Understanding on ITIL frameworks and ITSM tools

Ideally, you’ll also have

• Good soft skills i.e. verbal & written communication, technical document writing etc
• Strong project management, negotiation and interpersonal skills
• Prior experience working in Advisory or Technology Operations industry
• Customer orientation skills
• Industry related certification (e.g. CISSP, CISA, CISM, SABSA, PRINCE2, TOGAF)

What we look for

• A Team of people with commercial acumen, technical experience and enthusiasm to learn new things in this fast-moving environment with consulting skills.
• An opportunity to be a part of market-leading, multi-disciplinary team of 1600 + professionals, in the only integrated global transaction business worldwide.
• Opportunities to work with EY Consulting practices globally with leading businesses across a range of industries

At EY, we’re dedicated to helping our clients, from startups to Fortune 500 companies — and the work we do with them is as varied as they are.

You get to work with inspiring and meaningful projects. Our focus is education and coaching alongside practical experience to ensure your personal development. We value our employees and you will be able to control your own development with an individual progression plan. You will quickly grow into a responsible role with challenging and stimulating assignments. Moreover, you will be part of an interdisciplinary environment that emphasizes high quality and knowledge exchange. Plus, we offer:

• Support, coaching and feedback from some of the most engaging colleagues around
• Opportunities to develop new skills and progress your career
• The freedom and flexibility to handle your role in a way that’s right for you