Senior Cloud Security Consultant, Auckland

EY

Senior Cloud Security Consultant

  • Posted 2w ago
  • Hybrid
  • Full Time

Auckland


Job Description

  • At EY, we’re all in to shape your future with confidence.
  • We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.
  • Join EY and help to build a better working world.


Nāu te rourou, nāku te rourou, ka ora ai te iwi


With your contribution and my contribution, together we will thrive.

Hei Oranga Iwi | The opportunity


This is a hybrid position is based in our Tāmaki Makaurau (Auckland)


Join a growing Cyber Security team helping organisations navigate an increasingly complex  threat landscape and securely deliver cloud services, enterprise platforms, technology  solutions and business transformation initiatives.


As a Cloud Security Consultant, you will work with clients to assess security risks,

strengthen cloud security capabilities and support the secure delivery of technology  transformation programs. You will provide practical security advice across cloud, identity,  network, application and enterprise security domains while helping organisations improve  their security posture and resilience.


This opportunity is ideal for a cyber security professional with 4-6 years' experience  supporting enterprise cloud environments and technology transformation initiatives. You  will have the opportunity to deepen your expertise across cloud security, secure  architecture, identity and access management and modern security practices including  DevSecOps and cloud governance.


Working closely with Solution Architects, Security Architects, Principal Architects and  engineering teams, you will assess enterprise platforms, solutions and services to identify  risks, recommend improvements and support secure business outcome s. .


Ko Tō Rourou | Your key responsibilities


  • Partner with business and project teams to assess solutions and ensure alignment with security standards, policies and regulatory requirements.
  • Perform cloud security assessments, architecture reviews and confifiguration reviews across Microsoft Azure, AWS and Google Cloud Platform (GCP).
  • Assess cloud-native security controls across identity, networking, encryption, logging, monitoring, access management and data protection domains.
  • Review solution architectures and Solution Architecture Documents (SADs) to identify security risks, control gaps and opportunities for improvement.
  • Conduct threat modelling activities using established methodologies such as STRIDE and support secure-by-design outcomes.
  • Assess Infrastructure as Code (IaC) implementations, including Terraform, Bicep and cloud-native deployment templates, to identify security risks and misconfifigurations.
  • Support the integration of security controls into CI/CD pipelines and DevSecOps practices.
  • Conduct third-party security assessments, including vendor, SaaS and technology risk reviews.
  • Collaborate across Identity and Access Management (IAM), Privileged Access Management (PAM), Vulnerability Management, Cloud Security and Governance, Risk  and Compliance (GRC) functions.
  • Prepare high-quality security assessment reports containing clear fifindings, risk ratings and practical remediation recommendations.
  • Contribute to security governance forums, architecture review boards and transformation initiatives as required .


Ngā Pūkenga | Skills and attributes for success


Cloud Security


  • Experience conducting cloud security assessments, architecture reviews and risk assessments across enterprise environments.
  • Strong understanding of cloud security principles across Microsoft Azure and at least one of AWS or GCP.
  • Hands-on experience reviewing cloud security confifigurations and security controls.
  • Familiarity with cloud security tooling such as Microsoft Defender for Cloud, AWS S ecurity Hub, Security Command Center, Prisma Cloud or similar solutions.


Identity and Access Security


  • Experience with Identity and Access Management (IAM) and Privileged Access Management (PAM) solutions.
  • Experience with technologies such as Microsoft Entra ID, CyberArk, SailPoint or equivalent platforms.


Security Architecture and Engineering


  • Experience identifying and assessing security controls and compensating controls across enterprise solutions.
  • Understanding of network security, segmentation, encryption, key management and secure architecture principles.
  • Experience with Infrastructure as Code security reviews and cloud governance practices.
  • Exposure to container and Kubernetes security concepts is desirable.


Application Security and DevSecOps


  • Understanding of application security practices and frameworks including OWASP Top 10.
  • Experience with security testing approaches such as SAST, SCA and threat modelling.
  • Exposure to DevSecOps practices and secure CI/CD pipelines is desirable.


Security Frameworks and Standards


  • Working knowledge of industry frameworks and standards such as: NIST Cybersecurity Framework (CSF), ISO 27001 and ISO 27017, CIS Benchmarks


Consulting and Communication


  • Excellent report writing and documentation skills.
  • Strong stakeholder engagement and communication capabilities.
  • Ability to clearly articulate technical risks and recommendations to a variety of audiences.
  • Experience supporting large-scale technology transformation and integration initiatives.


Certififications


The following certififications are highly desirable but not mandatory:


  • A Z-500 Microsoft Azure Security Engineer Associate
  • CCSP Certifified Cloud Security Professional
  • CCSK Certifificate of Cloud Security Knowledge
  • AWS Security Specialty
  • Google Professional Cloud Security Engineer


Ko Taku Rourou | What we offer you


At EY, we’ll fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams.


  • Career development: At EY, your career is yours to shape! We’ll develop you with future-focused skills and equip you with world-class experiences www.ey.com/nz/careerdevelopment
  • Flexible work arrangements: Our flexible work policies empower you to balance your professional and personal life, fostering a culture of trust and autonomy.
  • A comprehensive benefits package : From a yearly wellness incentive, to access to additional 8 weeks of flex leave per year, and family-friendly policies, including up to 26 weeks of gender-neutral paid parental leave, we cater to your diverse needs to help you thrive both personally and professionally www.ey.com/nz/benefits


Inclusiveness is core to who we are and how we work together, driving value for our people and for our business. We encourage applications from people of all ages, nationalities, abilities, cultures, sexual orientations, and gender identities and are committed to providing an equitable and barrier free recruitment experience for all. We encourage you to share any support and adjustments you need to be your best and participate equitably in our recruitment process. We understand sharing your needs with us can be daunting, so if you have questions before or during your application, we welcome you to get in touch at contactrecruitment@au.ey.com or +64 9 300 7044 (option 2). Anything you tell us will be kept completely confidential.


He rourou kai kei ō ringa hei tākoha? Tēnā haria mai!


Are you ready to shape your future with confidence? Apply today

#LI-Hybrid


EY | Building a better working world

Our preferred applicant will be required to undertake employment screening by EY or our external third-party provider.

© 2026 Ernst & Young New Zealand. A member firm of Ernst & Young Global Limited. All Rights Reserved.


Desired Hard Skills

  • Cloud Security
  • DevSecOps
  • Identity and Access Management
  • Security Architecture
  • Threat Modelling

Desired Soft Skills

  • Teamwork
  • Communication
  • Consulting
  • Report Writing
  • Stakeholder Engagement

Benefits & Perks

Culture

  • 📚 Career Break
  • 🤱 Extended Parental Leave
  • 📆 Paid Volunteer Leave
  • 🏘 Work from Home
  • ❤ Care and Appreciation
  • 👶 Childcare Support
  • 💯 Employee Mentoring Program
  • 🩺 Health Insurance
  • ⚖ Work-Life Balance Support
  • 🧠 Mental Health Workshops
  • 💚 Counselling Services
  • 💪 Physical Health Workshops
  • 🌿 Wellness Program
  • 🏥 Subsidised Health Insurance
  • 📈 Professional Development
  • 🛂 Visa Sponsorship
  • 🏎 Competitive Salary
  • 🎉 Employee Discounts and Rewards
  • 🎖 Long Service Rewards
  • 📣 Referral Bonuses
  • 🚚 Relocation Support
  • 🏆 Performance Bonus
  • 💻 Company Supplied Technology
  • 🖥 Computer Assistance
  • 📱 Discounted Phone or Internet Plans
  • ⌨ Home Office Budget
  • 🩸 Free Period Products
  • ⏰ Flexible Work
  • 🍇 Fruit Box
  • ☕ Work Café
View All
  • 🌈 Rainbow Tick
  • 🌿 Indigenous Rights
  • 💸 Living Wage
  • ⛔ Animal Free Products
  • 🌐 INZ Accredited Employer

Are You an International Job Seeker?

Check if youʼre eligible to work in New Zealand before you apply - itʼs fast and free.

Get Your Free Visa Eligibility Check

Increase Your Hiring Chances

Let us create the perfect CV for this job!

Start Now
Report This Job