{"id":1219075,"url":"https://alion.io/job/ey-senior-cloud-security-consultant","title":"Senior Cloud Security Consultant","company":{"id":2859,"name":"EY","domain":"ey.com","url":"https://alion.io/company/ey-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Auckland, New Zealand"],"countries":["NZ"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":66000,"max_usd":152000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2094},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bicep","optional":false},{"name":"CI/CD","optional":false},{"name":"CyberArk","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Prisma Cloud","optional":false},{"name":"STRIDE","optional":false},{"name":"Terraform","optional":false},{"name":"CIS Benchmarks","optional":true},{"name":"ISO 27001","optional":true},{"name":"OWASP Top 10","optional":true}],"status":"live","first_seen_at":"2026-09-23T02:00:00Z","employer_posted_date":"2026-09-23","last_verified_at":"2026-10-16T23:41:25Z","board_verified":true,"closed_at":null,"days_open":23,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":23},"description":"At EY, we’re all in to shape your future with confidence.\nWe’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.\nJoin EY and help to build a better working world.\nNāu te rourou, nāku te rourou, ka ora ai te iwi\nWith your contribution and my contribution, together we will thrive.\n\nHei Oranga Iwi |The opportunity\nThis is a hybrid position is based in our Tāmaki Makaurau (Auckland)\nJoin a growing Cyber Security team helping organisations navigate an increasingly complex threat landscape and securely deliver cloud services, enterprise platforms, technology solutions and business transformation initiatives.\nAs a Cloud Security Consultant, you will work with clients to assess security risks,\nstrengthen cloud security capabilities and support the secure delivery of technology transformation programs. You will provide practical security advice across cloud, identity, network, application and enterprise security domains while helping organisations improve their security posture and resilience.\nThis opportunity is ideal for a cyber security professional with 4-6 years' experience supporting enterprise cloud environments and technology transformation initiatives. You will have the opportunity to deepen your expertise across cloud security, secure architecture, identity and access management and modern security practices including DevSecOps and cloud governance.\nWorking closely with Solution Architects, Security Architects, Principal Architects and engineering teams, you will assess enterprise platforms, solutions and services to identify risks, recommend improvements and support secure business outcomes. .\nKo Tō Rourou | Your key responsibilities\nPartner with business and project teams to assess solutions and ensure alignment with security standards, policies and regulatory requirements. \nPerform cloud security assessments, architecture reviews and confifiguration reviews across Microsoft Azure, AWS and Google Cloud Platform (GCP). \nAssess cloud-native security controls across identity, networking, encryption, logging, monitoring, access management and data protection domains. \nReview solution architectures and Solution Architecture Documents (SADs) to identify security risks, control gaps and opportunities for improvement. \nConduct threat modelling activities using established methodologies such as STRIDE and support secure-by-design outcomes. \nAssess Infrastructure as Code (IaC) implementations, including Terraform, Bicep and cloud-native deployment templates, to identify security risks and misconfifigurations. \nSupport the integration of security controls into CI/CD pipelines and DevSecOps practices. \nConduct third-party security assessments, including vendor, SaaS and technology risk reviews. \nCollaborate across Identity and Access Management (IAM), Privileged Access Management (PAM), Vulnerability Management, Cloud Security and Governance, Risk and Compliance (GRC) functions. \nPrepare high-quality security assessment reports containing clear fifindings, risk ratings and practical remediation recommendations. \nContribute to security governance forums, architecture review boards and transformation initiatives as required. \nNgā Pūkenga | Skills and attributes for success\nCloud Security\nExperience conducting cloud security assessments, architecture reviews and risk assessments across enterprise environments. \nStrong understanding of cloud security principles across Microsoft Azure and at least one of AWS or GCP. \nHands-on experience reviewing cloud security confifigurations and security controls. \nFamiliarity with cloud security tooling such as Microsoft Defender for Cloud, AWS Security Hub, Security Command Center, Prisma Cloud or similar solutions. \nIdentity and Access Security\nExperience with Identity and Access Management (IAM) and Privileged Access Management (PAM) solutions. \nExperience with technologies such as Microsoft Entra ID, CyberArk, SailPoint or equivalent platforms. \nSecurity Architecture and Engineering\nExperience identifying and assessing security controls and compensating controls across enterprise solutions. \nUnderstanding of network security, segmentation, encryption, key management and secure architecture principles. \nExperience with Infrastructure as Code security reviews and cloud governance practices. \nExposure to container and Kubernetes security concepts is desirable. \nApplication Security and DevSecOps\nUnderstanding of application security practices and frameworks including OWASP Top 10. \nExperience with security testing approaches such as SAST, SCA and threat modelling. \nExposure to DevSecOps practices and secure CI/CD pipelines is desirable. \nSecurity Frameworks and Standards\nWorking knowledge of industry frameworks and standards such as: NIST Cybersecurity Framework (CSF), ISO 27001 and ISO 27017, CIS Benchmarks \nConsulting and Communication\nExcellent report writing and documentation skills. \nStrong stakeholder engagement and communication capabilities. \nAbility to clearly articulate technical risks and recommendations to a variety of audiences. \nExperience supporting large-scale technology transformation and integration initiatives.\nCertififications\nThe following certififications are highly desirable but not mandatory:\nAZ-500 Microsoft Azure Security Engineer Associate \nCCSP Certifified Cloud Security Professional \nCCSK Certifificate of Cloud Security Knowledge \nAWS Security Specialty \nGoogle Professional Cloud Security Engineer \nKo Taku Rourou |What we offer you\nAt EY, we’ll fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams.\nCareer development: At EY, your career is yours to shape! We’ll develop you with future-focused skills and equip you with world-class experienceswww.ey.com/nz/careerdevelopment\nFlexible work arrangements: Our flexible work policies empower you to balance your professional and personal life, fostering a culture of trust and autonomy. \nA comprehensive benefits package: From a yearly wellness incentive,to access to additional 8 weeks of flex leave per year, and family-friendly policies, including up to 26 weeks of gender-neutral paid parental leave, we cater to your diverse needs to help you thrive both personally and professionally www.ey.com/nz/benefits\nInclusiveness is core to who we are and how we work together, driving value for our people and for our business. We encourage applications from people of all ages, nationalities, abilities, cultures, sexual orientations, and gender identities and are committed to providing an equitable and barrier free recruitment experience for all. We encourage you to share any support and adjustments you need to be your best and participate equitably in our recruitment process. We understand sharing your needs with us can be daunting, so if you have questions before or during your application, we welcome you to get in touch at  or +64 9 300 7044 (option 2). Anything you tell us will be kept completely confidential.\nHe rourou kai kei ō ringa hei tākoha? Tēnā haria mai!\nAre you ready to shape your future with confidence? Apply today\n#LI-Hybrid\n\nEY | Building a better working world\nOur preferred applicant will be required to undertake employment screening by EY or our external third-party provider. \n© 2026 Ernst & Young New Zealand. A member firm of Ernst & Young Global Limited. All Rights Reserved.","description_format":"text","description_chars":7462,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Parental leave"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Financial Advisory, Valuation & Restructuring","Management Consulting","Tax Advisory & Preparation"],"lifecycle":[{"event":"open","at":"2026-09-25T11:32:59Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 6,599 · green card filings: 694","filings_12m":6599,"filings_prev_12m":9468,"green_card_filings_12m":694,"median_offered_wage_usd":156073,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":420},{"country":"NL","licensed_sponsor":true,"evidence":"Recognised sponsor of the Dutch immigration service (IND)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Highly skilled migrants and regular labour","cap_exempt":false,"checked_at":"2026-10-03T21:10:06+00:00","sources":["IND: public register of recognised sponsors (work)"],"filings_for_role_12m":0}],"liveness":{"score":45,"band":"ok","label":"Likely open","p_open":1,"p_active":0.819,"p_room":0.55,"age_days":23,"expected_fill_days":22,"reasons":["conf:3","wave","velocity","win:tail","comp:brand"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/ey-senior-cloud-security-consultant","json_url":"https://alion.io/job/ey-senior-cloud-security-consultant.json","meta":{"generated_at":"2026-10-17T00:45:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1045,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2859},"rest":"https://alion.io/mcp/rest/get_company?id=2859"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fey-senior-cloud-security-consultant"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fey-senior-cloud-security-consultant"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fey-senior-cloud-security-consultant"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ey-senior-cloud-security-consultant\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fey-senior-cloud-security-consultant"}]}