at EY in Chicago, Illinois, United States
Job Description
EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities. At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.
Today’s world is fueled by vast amounts of information. Data is more valuable than ever before. Protecting data and information systems is central to doing business, and everyone in EY Information Security has a critical role to play. Join a global team of over 1100 people who collaborate to support the business of EY by protecting EY and client information assets! Our Information Security professionals enable EY to work securely and deliver secure products and services, as well as detect and quickly respond to security events as they happen. Together, the efforts of our dedicated team help protect the EY brand and build client trust.
Within Information Security we blend risk strategy, digital identity, cyber defense, application security and technology solutions as we consider the entre security lifecycle. You will join a team of hardworking, security-focused individuals dedicated to supporting, protecting, and enabling the business through innovative, secure solutions that provide speed to market and business value.
The opportunity
Security Technology Services (STS) organization, a part of Information Security, enables over 400,000 individuals across 150+ countries to access systems and information securely. As a member of the Security Technology Services (STS) team, the Cybersecurity Enterprise Architect (Domain Lead) bridges the divide between higher-level strategy and solution architecture, and determines the future facing architectural travel direction for security technologies primarily centered around network and infrastructure protection for EY Global. The Domain Lead influences strategy, and guides solution architecture efforts, bringing value to stakeholders, and ultimately making a substantial and positive difference for Information Security, for the global business of EY, and for themselves in their profession. The successful candidate will be a top-tier professional of networking & security technologies, a big picture thinker, and a proficient presenter, communicator, and mentor who is ready to be the focal point driving force of strategic ideas and bring those ideas to execution & realization.
Your key responsibilities
+ Produce and document technology strategy primarily for the Domain Lead’s security technology domain
+ Provide security thought leadership at an enterprise level
+ Provide architecture guidance to project teams and other areas of the organization
+ Track and monitor relevant security vendor product landscapes
+ Drive Zero Trust vendor selection process
+ Aid in critical decision-making for in-house security services (e.g. technology/service ever-greening, directional shifts in technology, technology/service sunsetting)
+ Perform & document technology research with the potential for high level prototyping of solution options
+ Manage technology standard lifecycle for responsible technologies
+ Incorporate People, Process, and Technology into architecture work
+ Collaborate closely with the Strategy team to both influence and incorporate organizational strategy
+ Establish & maintain a network of stakeholders from various organizations in IT
+ Stay current on recent trends, developments, and drivers and incorporate them into architecture work
+ Collaborate with other Cybersecurity Enterprise Architects, Solution Architects, and other interested stakeholders
+ Serve in an advisory capacity to Cybersecurity Solution Architects and projects
+ Develop architecture artifacts (i.e., architecture visions, targets , viewpoints, etc.)
+ Research security topics and produce recommendations
+ Develop security technology standards
+ Travel requirements < 10%
Skills and attributes for success
+ Experience initiating new ideas, and leading & driving architectural activities
+ Confidence in leading and driving architectural direction
+ Experience working in a global multinational enterprise
+ Creative, innovative thinking style
+ Extensive experience with Network Protection technologies, including Firewalls, CSWG, ZTNA, IDS, NDR, NAC, Threat Detection and Response
+ Network technology experience, including infrastructure platforms such as telecom, networking, management/monitoring, DNS, wireless, etc.
+ Cloud exposure – particularly Microsoft cloud offerings (i.e., O365 and Azure)
+ Experience developing and influencing Zero Trust network policies & capabilities
+ General knowledge of the wider IT technology landscape
+ History of technology experience ranging from engineering to architecture
+ Ability to quickly become a near-subject-matter-expert in new technology areas
+ Flexibility to face constantly evolving technologies and dynamic global complexities
+ Client-service relationship experience and appreciation for internal customers
+ Superb communication & presentation skills, especially to executive leadership
+ Awareness of audience perspective, both technical and non-technical
+ Experience developing security architecture artifacts (i.e., visions, targets, etc.)
+ Experience in organizations supporting a mobile workforce
+ Well versed in common Information Security practices and the CISSP domains
+ Able to find opportunities for Cybersecurity transformation or enhancements
To qualify for the role, you must have
+ Degree in Computer Science or equivalent work experience
+ 12+ years of experience in the Information Technology field
+ 5+ years of architecture experience, including enterprise architecture
+ 3+ years working with network protection technologies
Ideally, you’ll also have
+ Customer advisory board participation: Zscaler, Palo Alto, Cisco, or Check Point
+ Security certification such as CISSP or CISM
+ TOGAF and/or SABSA architecture framework
+ SANS Certifications including: GSEC, ECSA, ECSP
What we look for
+ Passion for making a difference
+ Strong soft skills, ability to understand and integrate cultural diversity and to work with cross-cultural and cross-organizational teams
+ Deep technical acumen and critical thinking skills demonstrating analytical and systematic approach to problem solving
+ Experience working in a global virtual environment
+ Excellent written & verbal communication skills, including preparation & delivery of presentations
+ Good judgment, tact, and decision-making for delivering practical architectures
+ Ability to deal with ambiguity and change, and exercise appropriate time management to meet objectives
+ Ability to collaborate with team members and executive stakeholders as well as work autonomously
What we offer
The compensation ranges below are provided in order to comply with United States pay transparency laws. Other geographies will follow their local salary guidelines, which may not be a direct conversion of published US salary range/s. We offer a comprehensive compensation and benefits package where you’ll be rewarded based on your performance and recognized for the value you bring to the business. The salary range for this job in most geographic locations in the US is $140,700 to $263,200. The salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is $168,900 to $299,100. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, ski