Associate - Cybersecurity Consultant

Associate - Cybersecurity Consultant   At EY, we’re all in to shape your future with confidence.   We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.     Join EY and help to build a better working world.   Are you ready to shape the future with confidence?   Here at EY, you’ll have the chance to build a truly exceptional experience. We’ll empower you with the latest technology, surround you with high-performing teams, and provide the global scale and diverse and inclusive culture you need to discover your full potential. Through our coaching and training programs, you’ll develop the skills you need to stay relevant today and, in the future, – all while building a network of colleagues, mentors, and leaders who will be on the journey with you at EY and beyond. The opportunity: your next adventure awaits Provide Governance, Risk and Compliance (GRC) services to clients:

Perform cybersecurity maturity assessments and gap analyses against recognised frameworks such as ISO 27001, NIST Cybersecurity Framework, CIS Controls and industry best practices. Conduct enterprise and operational risk assessments and facilitate risk treatment planning. Develop and review security policies, standards, procedures and governance frameworks. Support compliance programmes related to NIS2, DORA, AI Act, GDPR and relevant Luxembourg regulatory requirements (CSSF, CAA and other sector-specific obligations). Assist organisations in strengthening third-party risk management and supply chain security programmes. Contribute to cyber strategy, security roadmaps and transformation initiatives. Contribute to programmes related to operational resilience, third-party risk management and business continuity.

Assess the effectiveness of security controls across infrastructure, cloud, applications and endpoint environments. Perform security reviews, vulnerability assessments and technical risk analyses. Carry out penetration testing activities and remediation validation exercises. Evaluate cloud security postures across Microsoft Azure, AWS and Google Cloud environments. Contribute to security architecture reviews and secure-by-design initiatives. Assess identity and access management, privileged access management, endpoint security, network security and security monitoring capabilities. Support security operations, detection and response improvement initiatives.

Support clients in defining cybersecurity target operating models and governance structures. Facilitate workshops with business stakeholders, technical teams and executives. Translate technical findings into business risks and actionable recommendations. Contribute to complex cyber transformation programmes covering people, process and technology dimensions. Assist clients in prioritising remediation activities and security investment decisions.

Project Delivery & Business Development

Prepare assessment reports, presentations and client deliverables. Participate in client meetings, workshops and project activities. Contribute to the development of methodologies, accelerators and internal assets. Maintain awareness of emerging threats, technologies and regulations.

Consultant

You have an agile, growth-oriented mindset. What you know matters. But the right mindset is just as important in determining success. We’re looking for people who are innovative, can work in an agile way and keep pace with a rapidly changing