Senior Consultant, Cyber, Cloud, FS in Edinburgh

At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

The Opportunity

You can be based at our Canary Wharf office in London or our Edinburgh office. You will be required to be onsite three times per week. EY’s EMEIA Cyber Practice continues to grow rapidly, and the UK team is seeking a Cyber Security Senior Consultant with experience supporting clients to secure cloud platforms. You will play a key role in client delivery and cloud-native security design, working under the guidance of Managers and Senior Managers. You will join an expanding team of over 1,000 Cyber professionals across EMEIA and align to the UK Financial Services Cyber practice, supporting leading Financial Services organisations with advisory and delivery‑led cyber engagements.

Your Key Responsibilities

• Support the delivery of high‑quality cyber engagements, act as a trusted advisor to clients, and contribute to business development activities on priority accounts.
• Contribute innovative ideas, adapt methods to client operating models and cultures, and support the development of EY thought leadership.
• Improve delivery efficiency and quality across engagements and internal initiatives.
• Work as a key delivery team member on engagements of varying size and complexity, operating under the direction of Managers, Senior Managers, and Directors.
• Proactively identify risks and issues, elevate them appropriately, and contribute positively to a collaborative learning culture by coaching junior team members.

Client Responsibilities

• Support the delivery of Cyber Security engagements, contributing to cloud and multi‑cloud security solution design across AWS, Azure, and/or GCP.
• Assist with the configuration and integration of CNAPP/CSPM tools to establish secure baselines, continuous visibility, misconfiguration prevention, and vulnerability/exposure management.
• Participate in technical discovery and threat modelling for cloud‑native architectures (containers, Kubernetes, serverless), helping translate findings into prioritised remediation actions and user stories.
• Contribute to the development of Statements of Work (SOWs), delivery plans, and effort estimates; support pre‑sales activities including RFP responses, demos, and solution architecture workshops.
• Support engagement managers by producing high‑quality deliverables, reviewing security configurations and policies, and ensuring work is completed on time and to EY quality standards.
• Contribute to the creation of accelerators such as reference architectures, templates, runbooks and security blueprints to improve consistency and speed across engagements.
• Work with alliance partners and product vendors to build familiarity with cloud security tooling and emerging capabilities.
• Build strong working relationships with clients and internal EY stakeholders across Consulting and other service lines.

People Responsibilities

• Support the development of junior team members through coaching and knowledge sharing.
• Provide input into performance feedback and engagement reviews.
• Contribute to people initiatives such as recruitment, onboarding and internal training for Cyber professionals.

Skills and Attributes for Success

To qualify for the role you must have:

• Experience supporting or advising Financial Services organisations on cyber security best practice and cloud security risks.
• Awareness of UK Financial Services security standards and regulatory expectations.
• Hands‑on experience contributing to cloud security architecture and delivery initiatives.
• Solid architectural understanding across core cloud services (networking, IAM/workload identity, compute, containers and data services) on at least one major cloud platform (ideally two).
• Practical exposure to CNAPP/CSPM platforms (e.g. Wiz, Prisma Cloud, Microsoft Defender).
• Foundational knowledge of Kubernetes security, including RBAC, workload identity and container image security.
• Understanding of secrets management and machine identity.
• Strong written and verbal communication skills, with experience producing client‑facing documentation and participating in technical discussions with both engineers and non‑technical stakeholders.
• Experience working in consulting or complex, regulated environments.

Ideally you’ll also have:

• Exposure to Data Security Posture Management (DSPM).
• Experience with Infrastructure as Code and Policy as Code.
• Relevant certifications in cloud platforms or security (e.g. AWS/Azure/GCP, CISSP, CCSP, Kubernetes).

What We Look For

We are looking for candidates with strong technical foundations in cloud security, exposure to UK Financial Services environments and the motivation to grow into leadership roles. You should be comfortable working directly with clients, eager to learn and proactive in contributing to team success.

What We Offer

We offer a competitive remuneration package where you’ll be rewarded for your individual and team performance. Our comprehensive Total Rewards package includes support for flexible working and career development, and with FlexEY you can select benefits that suit your needs, covering holidays, health and well‑being, insurance, savings and a wide range of discounts, offers and promotions.

Plus we offer:

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible. Apply now.