Security Governance and Architecture Executive Leader at Ernst & Young Global Limited (EY)

The opportunity

You’ll work alongside respected industry professionals, learning about and using the latest tools and techniques to identify and overcome some of the most relevant and pressing security issues in the world. It’s a highly specialized area, where you’ll learn highly sought-after technical skills, all while developing your relationship management abilities – often by working directly on-site with our clients.

Your key responsibilities

• You will work alongside the Executive Cyber team to bring vision, innovation and execution to the EY technical solutions through a series of ongoing initiatives.  Our security professionals possess diverse industry knowledge, along with unique technical expertise and specialized skills. The team stays highly relevant by servicing our client’s unique and challenging needs, attending and speaking at top security conferences around the world, sharing knowledge on a variety of topics with key industry groups, and taking best-in-industry training. The team frequently provides thought leadership and information exchanges through traditional and less conventional communications channels such as speaking at conferences, publishing white papers and blogging.
• As part of our Cybersecurity Consulting Executive team, you’ll assist clients in identifying potential threats, vulnerabilities, and deficiencies in their environments and aid them by bolstering their cybersecurity maturity and resilience.

Skills and attributes for success

• Lead and manage the EY Cyber Strategy & Architecture group
• Create, execute and monitor strategy for the Cyber Strategy & Architecture group.
• Be a part of the Cyber executive leadership and report to the Cyber South Africa partner.
• Collaborate with the Cyber Security Leadership to develop and update standards, procedures, guidelines, and leverage best practices
• Directly present to clients, generate sales and be able to manage consultative engagements end to end.
• Actively participate in hiring of new team members, adheres to policies and procedures, and create motivational strategies to drive quality performance
• Identify opportunities to grow and improve Cyber Strategy & Architecture services, providing detailed recommendations for service enhancements, new services, and products, as appropriate
• Generate new business opportunities by participating in market facing activities, executive briefings and developing thought leadership materials.
• Strong collaboration with EY senior executives, other key stakeholders and importantly other EY regional and global executives to co-establish, promote and drive the EY Cyber ecosystem.

To qualify for the role, you must have

• Excellent teamwork, passion and drive to succeed – with real inspirational leadership.
• Managerial capabilities and experience to motivate a diverse group of individuals, strong interpersonal skills to foster a team environment, and the ability to create strategy, execute, monitor and implement action plans
• Previous supervisory experience in leading a Cyber Strategy or Security Architecture (or both) teams.
• Excellent analytical and problem solving skills
• Expert understanding of common cybersecurity attack vectors, threats, vulnerabilities, and countermeasures, leading practices in Cyber Transformation programs and Cyber Governance and Design
• Ability to build, lead, manage and motivate teams in a dynamic, mission-critical operations and cyber advisory environment
• Expert understanding of cyber regulatory universe (PCI, ISO27001/2, POPIA, SWIFT CSP etc)
• Manage customer relationships through resolving problems and following up on the status of projects
• Expert in Cyber Governance and Design, Cyber Solutions Architecture, Cyber Program Management, Information Security Management Systems
• Understanding of Attack & Penetration Testing / Ethical Hacking
• Experience of Application Security Risk Assessments
• Awareness of Big data analytics, dashboards, eGRC and behavioural analysis tools.
• Awareness and knowledge Cyber OT and IoT issues.
• Awareness of emerging Cyber trends

Ideally, you’ll also have

• Bachelor’s degree in related discipline and 12+ years of experience in related field
• 8+ years of experience in leading Cyber teams
• 6+ years of relevant technical and business experience required
• Leadership experience in managing cross-functional teams and influencing senior level management and key stakeholders
• Ability to be visionary, strategic, and tactical
• Has an established Cyber industry profile.
• Knowledge of current and emerging security standards, privacy regulations and security trends
• Ability to explain business principles of secure system designs in terms of business risk
• Strong networking and application knowledge
• Strong analytical and problem-solving skills
• Internationally recognized technical certifications in relevant areas (some e.g. CISM, CISSP, TOGAF, SABSA, CIPP/IT)
• Practical experience on customer service processes and solving issues
• Understanding of and experience in implementing the principles of best practice security as embodied in ISO27001, NIST, CIS etc
• Understanding of and experience in assessing clients against regulatory standards and in implementing compliance measures.
• Auditing experience would be an advantage

What we look for

• If you’re a natural leader, with a talent for motivating individuals, building relationships, and solving complex client problems, we’re interested in you. You’ll need to be ready to listen and confident in challenging the status quo. Top performers in this role will have strong experience contributing content to pursuits, collaboratively structuring work, managing teams, developing reusable collateral, and experience working with C-suite client executives. If you have a genuine passion for helping businesses achieve their full potential, this role is for you.