(INV) Senior Consultant , Cybersecurity, Strategy Governance Risk and Compliance, TC, UKI

Overview

In this role you will help organisations define and transform their cyber security capabilities, supporting executives across sectors. You’ll develop cyber strategies, operating models and roadmaps that enable secure growth and resilience. You’ll work with cross‑functional teams to translate security ambitions into practical outcomes and contribute to EY’s evolving cyber practice. This position offers exposure to senior stakeholders and a chance to shape security outcomes at leading organisations.

Pay / Benefits

• Competitive remuneration
• Total Rewards package
• Flexible working
• Career development
• FlexEY benefits
• Health and well-being

Responsibilities

• Deliver cyber strategy and transformation engagements aligned to business objectives and multi-year roadmaps
• Conduct maturity, capability and risk assessments against industry frameworks and regulatory requirements
• Design and enhance cyber governance frameworks including policies, controls, and reporting
• Support cyber risk management activities from identification to treatment planning
• Lead regulatory and compliance engagements to improve conformance with cyber, privacy and resilience requirements
• Develop practical recommendations and implementation roadmaps for cyber resilience and governance maturity
• Build and maintain trusted client relationships with senior stakeholders
• Support business development, proposals, and thought leadership initiatives
• Collaborate across EY’s Cyber and Technology Consulting teams to deliver integrated solutions
• Coach and develop junior team members and contribute to knowledge sharing
• Create high‑quality client reports for engagement leaders
• Identify sales opportunities and contribute to proposals and marketing materials
• Lead by example and mentor junior staff

Key requirements

• Professional experience delivering cyber security in operational or consulting roles
• Self-starter with drive and ability to work under pressure in unstructured environments
• Ability to maintain subject‑matter knowledge across evolving threats, regulations and technology risks
• Ability to produce impactful written presentations and engage with senior stakeholders

• Client management and relationship building
• Effective communication and presentation skills
• Mentoring and coaching of junior team members
• Cyber strategy, governance, risk and compliance
• Regulatory and privacy compliance knowledge
• Risk assessment and maturity modelling

…