(INV) Senior Consultant, Cybersecurity, Strategy Governance Risk andCompliance, TC, UKI

(INV) Senior Consultant , Cybersecurity, Strategy Governance Risk and Compliance, TC, UKI Location: London Other locations: Primary Location Only Date: 19 Oct 2026 Requisition ID: 1753973 At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. The Opportunity EY is seeking an experienced Senior Consultant to join our Cyber Strategy, Governance, Risk and Compliance (GRC) team. You will help organisations define, manage and transform their cyber security capabilities, supporting clients across a range of sectors to address evolving threats, regulatory requirements and business priorities. As a key member of our team, you will work with clients to develop cyber security strategies, operating models, governance frameworks and transformation roadmaps that enable secure business growth and resilience. You will play an important role in delivering complex client engagements, supporting business development activities and contributing to the continued growth and evolution of EY's Cyber practice. Working alongside multidisciplinary teams in the UK and globally, you will help clients understand and manage cyber risk, strengthen governance arrangements, improve compliance and translate security ambitions into practical, achievable outcomes. You will also contribute to the development of innovative solutions, thought leadership and industry propositions that address emerging cyber challenges and market demands. This role offers the opportunity to work across a broad range of cyber and technology topics, engaging with senior stakeholders and helping some of the world's leading organisations build confidence in their cyber resilience. Your key responsibilities Your responsibilities will include, but are not limited to: Delivering cyber strategy and transformation engagements, supporting clients to define security visions, strategies, target operating models, investment priorities and multi-year transformation roadmaps aligned to business objectives. Conducting cyber security maturity, capability and risk assessments, identifying strengths, weaknesses and opportunities for improvement against industry frameworks, regulatory requirements and leading practices. Designing and enhancing cyber governance frameworks, including organisational structures, roles and responsibilities, policies, standards, controls, decision-making forums and reporting mechanisms. Supporting cyber risk management activities, including risk identification, assessment, quantification, treatment planning and the development of risk management processes aligned to organisational risk appetite. Delivering regulatory and compliance engagements, helping clients assess and improve conformance with applicable cyber security, privacy, operational resilience and industry-specific requirements. Developing practical recommendations and implementation roadmaps to improve cyber resilience, governance effectiveness and risk management maturity. Building and maintaining trusted client relationships, working with senior stakeholders to understand business challenges and translate technical issues into strategic business outcomes. Supporting business development activities, including proposals, market propositions, thought leadership and client pursuits. Working collaboratively across EY's Cyber and Technology Consulting teams to deliver integrated solutions that address client priorities and maximise value. Coaching and supporting junior team members, contributing to team development, knowledge sharing and the continued growth of the Cyber practice. Creating high-quality reports as part of a team, for review by engagement and project leaders. Identifying sales opportunities and working with senior practice leaders and market leaders in the creation of proposals and marketing material; creating thought leadership and market materials for selling and promoting EY cyber security offerings Leading and developing junior team members by sharing knowledge, acting as mentor and coach to them and leading by example To qualify for the role you must have Professional experience delivering cyber security either in an operational or consulting role High level of drive, commitment to achieving solutions, and ability to work under pressure and under limited supervision (‘self-starter’) in unstructured environments Demonstrated your ability to build and maintain subject-matter knowledge across evolving cyber threats, regulatory expectations, industry frameworks and emerging technology risks, applying these insights to client challenges Ability to develop impactful written presentations and participate effectively in meetings with senior stakeholders Ideally, you’ll also have Security related qualifications such as CISSP, CISM, CISMP, ISO27001 lead implementer or auditor, MBCI or IAPP. We value practical experience so welcome applications from those who do not hold, or are still working towards their qualifications. Key delivery experience in the following security disciplines cyber strategy, governance risk and compliance Key sector experience in one or more of the following: Government