Title: IT Security Consultant<\/p>\n
Location: GH-All-Accra<\/p>\n
Job Number: ACC0000K<\/p>\n
Job purpose<\/p>\n
As IT Risk and Assurance Senior, you\u2019ll contribute technically to IT Risk and Assurance client engagements and internal<\/p>\n
projects. An important part of your role will be to actively establish, maintain and strengthen internal and external<\/p>\n
relationships. You\u2019ll also identify potential business opportunities for Ernst & Young within existing engagements, and<\/p>\n
escalate these as appropriate. Similarly, you\u2019ll anticipate and identify risks within engagements and share any issues with<\/p>\n
senior members of the team.<\/p>\n
In line with Ernst & Young\u2019s commitment to quality, you\u2019ll confirm that work is of high quality and is reviewed by the next level<\/p>\n
reviewer. As an influential member of the team, you\u2019ll help to create a positive learning culture, coach and counsel<\/p>\n
junior team members and help them to develop.<\/p>\n
Client responsibilities<\/p>\n
Working in teams, you will be responsible for delivery of consultancy engagements carrying out review of IT control environments (policies, standards, and procedures), security analysis of IT infrastructure components, attack and penetration tests, vulnerability assessments.<\/p>\n
Additional responsibilities may include:<\/p>\n
Cyber Threat Management\/Penetration Tests<\/p>\n
IT Security\/Risk Assessments,<\/p>\n
Identity & Access Management,<\/p>\n
Information Protection & Privacy,Process, Procedures and Standards Reviews,<\/p>\n
Information System Audits and IT Security Audits.<\/p>\n
People responsibilities<\/p>\n
Develop people through effectively supervising, coaching, and mentoring staff<\/p>\n
Conduct performance reviews and contribute to performance feedback for staff<\/p>\n
Contribute to people-related initiatives including recruiting, retaining and training IT Risk and Assurance professionals<\/p>\n
Maintain an educational program to continually develop personal skills of all staff<\/p>\n
Understand and follow workplace policies and procedures<\/p>\n
Qualifications: Technical skills requirements You \u2018ll have knowledge and experience in the following:<\/p>\n
Operational\/project oriented\/consulting Information Security<\/p>\n
An understanding of Information Security principles and practices<\/p>\n
Experience in vulnerability assessments and Ethical Hacking projects using different tools<\/p>\n
Broad understanding of industry standards and frameworks (ISO 27001-2\/ COBIT\/ ITIL\/ PCI-DSS<\/p>\n
Hands-on experience with one or more IT security technologies solutions ( DLP, MDM, Threat intelligence, Infrastructure monitoring\/management, IDS\/IPS, Cloud computing)<\/p>\n
Knowledge and experience in programming and security code review<\/p>\n
Experience in Operational Technology environments<\/p>\n
Possession of the following certifications is an added advantage<\/p>\n
ISO 27001-2\/COBIT Lead Implementer\/Auditor certification<\/p>\n
Professional certifications (CEH, LPT, CISSP, CISM, etc.)<\/p>\n
MCSE, CCNA\/CCIE and OCA\/OCP certification<\/p>\n
You\u2019ll have knowledge and experience in one or more of Ernst & Young\u2019s priority industry sectors:<\/p>\n
Government & Public Sector<\/p>\n
Consumer Products<\/p>\n
Banking and Financial Services<\/p>\n
Technology<\/p>\n
Communications & Entertainment<\/p>\n
Additional requirements<\/p>\n
Demonstrated track record with a blue chip consulting organization and\/or a blue chip organization<\/p>\n
Strong academic record including a degree in Computer Science, Computer Engineering or a related field.<\/p>\n
Good interpersonal and consultative skills<\/p>\n
Excellent writing and communication skills, fluent in English<\/p>\n
Why should I work for Ernst & Young in Information Technology Risk and Assurance?<\/p>\n
Information technology is one of the key enablers for modern organizations. As one of our information technology risk and assurance professionals, you\u2019ll work with clients to improve the competitive advantage of their IT operations by enhancing efficiency and effectiveness. You\u2019ll help them create and implement processes to identify risks associated with running their systems and find ways to manage those risks. You can expect to work on some of the biggest external and internal audit engagements and we\u2019ll give you the opportunities and support you need to succeed professionally and personally.<\/p>\n