Background

EY is a global leader in assurance, tax, transaction and advisory services. Worldwide, our 230,000 people are united by our shared values and an unwavering commitment to quality. EY, has been in East Africa for over 87 years and with over 600 professionals, is today one of the largest professional services firms in the region.

Your Key Responsibilities:

You'll work alongside respected industry professionals, learning about and using the latest tools and techniques to identify and overcome some of the most relevant and pressing security issues in the world. It's a highly specialized area, where you'll learn highly sought-after technical skills, all while developing your relationship management abilities – often by working collaboratively with both external and internal clients.

Skills and Attributes for success:

• Evidence of self-motivation to continuously develop in the dynamic domain of Cybersecurity
• Good organizational and time management skills with the ability to prioritize and complete multiple complex projects under tight deadlines
• Ability to translate Cybersecurity issues into business risks
• Excellent interpersonal skills and ability to work effectively within a team at all hierarchical levels
• Willingness to research client inquiries and emerging issues, including regulations, industry practices, and new technologies
• Experience, knowledge and strong interest in cybersecurity, data and information security are essential for this role
• Unquestionable Integrity and Ethics
• Strong analytical skills.

Qualifications and Requirements:

To qualify for the role, you must have:

• Bachelor’s Degree in either: Computer Science, BBIT or Software Engineering
• One or more of the following professional qualifications: CISSP, CISM, CEH, GSEC, CDPSE, CompTIA Security GPEN - GIAC Penetration Tester, CCNA (or other relevant network courses)
• A minimum overall grade of a B in KCSE and B in both English & Mathematics
• 2-6 years of work experience in dynamic IT environments in reputable organisations, at least 1 or 2 of which should be in Cybersecurity/Cyber risk related work. Experience garnered in firms involved in Cybersecurity, IT Audit, or Consulting services will be an added advantage
• Experience in performing Vulnerability Assessments & Penetration Tests and Enterprise-wide Security assessments, with high-quality work that is aligned with EY’s standards of technical excellence
• Knowledge and experience in the following areas; Red Teaming, Identity and Access Management (IAM), Cloud Security, Data Protection and Privacy, Container security, API, integrations/interfaces security
• Knowledge on the intersection between AI and Cybersecurity will be added advantage.
• Ability to support business development activities, including proposal writing and impactful presentations to potential clients
• SIEM deployments and Security Operations Center (SOC) experience is desired
• Knowledge of security standards and best practice frameworks such as NIST CSF, ISO 27001, CoBIT
• Robust project management experience and expertise

What working at EY offers:

• Support and coaching from some of the most engaging and inspiring colleagues
• Opportunities to develop new skills and progress your career
• The freedom and flexibility to handle your role in a way that’s right for you

• Work alongside respected industry professionals, learning about and using the latest tools and techniques to identify and overcome some of the most relevant and pressing security issues in the world.
• Develop highly sought-after technical skills.
• Develop relationship management abilities, often by working collaboratively with both external and internal clients.
• Translate Cybersecurity issues into business risks.
• Work effectively within a team at all hierarchical levels.
• Research client inquiries and emerging issues, including regulations, industry practices, and new technologies.
• Perform Vulnerability Assessments & Penetration Tests and Enterprise-wide Security assessments.
• Support business development activities, including proposal writing and impactful presentations to potential clients.

• Self-motivation to continuously develop in the dynamic domain of Cybersecurity
• Good organizational and time management skills
• Ability to prioritize and complete multiple complex projects under tight deadlines
• Ability to translate Cybersecurity issues into business risks
• Excellent interpersonal skills
• Ability to work effectively within a team at all hierarchical levels
• Willingness to research client inquiries and emerging issues
• Experience, knowledge and strong interest in cybersecurity, data and information security
• Unquestionable Integrity and Ethics
• Strong analytical skills
• Experience in performing Vulnerability Assessments & Penetration Tests and Enterprise-wide Security assessments
• Knowledge and experience in Red Teaming, Identity and Access Management (IAM), Cloud Security, Data Protection and Privacy, Container security, API, integrations/interfaces security
• Ability to support business development activities, including proposal writing and impactful presentations
• SIEM deployments and Security Operations Center (SOC) experience
• Knowledge of security standards and best practice frameworks such as NIST CSF, ISO 27001, CoBIT
• Robust project management experience and expertise

• Bachelor’s Degree in either: Computer Science, BBIT or Software Engineering
• One or more of the following professional qualifications: CISSP, CISM, CEH, GSEC, CDPSE, CompTIA Security GPEN - GIAC Penetration Tester, CCNA (or other relevant network courses)
• A minimum overall grade of a B in KCSE and B in both English & Mathematics
• 2-6 years of work experience in dynamic IT environments in reputable organisations, at least 1 or 2 of which should be in Cybersecurity/Cyber risk related work.
• Experience garnered in firms involved in Cybersecurity, IT Audit, or Consulting services will be an added advantage.
• Experience in performing Vulnerability Assessments & Penetration Tests and Enterprise-wide Security assessments, with high-quality work that is aligned with EY’s standards of technical excellence
• Knowledge and experience in the following areas; Red Teaming, Identity and Access Management (IAM), Cloud Security, Data Protection and Privacy, Container security, API, integrations/interfaces security
• Knowledge on the intersection between AI and Cybersecurity will be added advantage.
• Ability to support business development activities, including proposal writing and impactful presentations to potential clients
• SIEM deployments and Security Operations Center (SOC) experience is desired
• Knowledge of security standards and best practice frameworks such as NIST CSF, ISO 27001, CoBIT
• Robust project management experience and expertise