Associate - Cybersecurity Consultant

About the role

EY is hiring an Associate Cybersecurity Consultant to support clients with cybersecurity governance, risk and compliance (GRC) services, technical security reviews and cyber transformation projects. The role covers assessments, policy work, compliance programmes and client workshops, and involves preparing reports and taking part in client meetings.

Key responsibilities

• Perform cybersecurity maturity assessments and gap analyses against ISO 27001, NIST Cybersecurity Framework, CIS Controls and industry best practices.
• Conduct enterprise and operational risk assessments, facilitate risk treatment planning and strengthen third-party risk and supply chain security.
• Develop and review security policies, standards, procedures and governance frameworks.
• Support compliance programmes related to NIS2, DORA, AI Act, GDPR and Luxembourg regulatory requirements (CSSF, CAA).
• Review security controls across infrastructure, cloud, applications and endpoints, including penetration testing and remediation validation.
• Evaluate cloud security postures on Microsoft Azure, AWS and Google Cloud, and assess IAM, privileged access, endpoint, network security and monitoring.
• Contribute to cyber strategy, security roadmaps, operational resilience and business continuity programmes.
• Help clients define target operating models, run workshops with stakeholders and executives, and turn technical findings into business risks and recommendations.
• Prepare assessment reports, presentations and deliverables, and contribute to methodologies, accelerators and internal assets.

Required profile

• Master's degree in Cybersecurity, Information Security, Computer Science or a related field.
• 1 to 3 years of experience in cybersecurity, risk management, IT security or related domains.
• Fluent in English and French.
• An agile, growth-oriented and curious mindset, with an inclusive approach to teamwork.

What we offer

• Courses and development programmes to build technical and leadership skills.
• Work on integrated teams across the globe with colleagues of diverse backgrounds.
• Investment in personal well-being and career development.