Senior Cloud Security Consultant

Senior Cloud Security Consultant

Location: Auckland

Other locations: Primary Location Only

Salary: Competitive

Date: 25 Aug 2026

Job description

Requisition ID: 1738328

At EY, were all in to shape your future with confidence.

Well help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

Nāu te rourou, nāku te rourou, ka ora ai te iwi

With your contribution and my contribution, together we will thrive.

Hei Oranga Iwi | The opportunity

This is a hybrid position is based in our Tāmaki Makaurau (Auckland)

Join a growing Cyber Security team helping organisations navigate an increasingly complex threat landscape and securely deliver cloud services, enterprise platforms, technology solutions and business transformation initiatives.

As a Cloud Security Consultant, you will work with clients to assess security risks,

strengthen cloud security capabilities and support the secure delivery of technology transformation programs. You will provide practical security advice across cloud, identity, network, application and enterprise security domains while helping organisations improve their security posture and resilience.

This opportunity is ideal for a cyber security professional with 4-6 years experience supporting enterprise cloud environments and technology transformation initiatives. You will have the opportunity to deepen your expertise across cloud security, secure architecture, identity and access management and modern security practices including DevSecOps and cloud governance.

Working closely with Solution Architects, Security Architects, Principal Architects and engineering teams, you will assess enterprise platforms, solutions and services to identify risks, recommend improvements and support secure business outcomes. .

Ko Tō Rourou | Your key responsibilities

Partner with business and project teams to assess solutions and ensure alignment with security standards, policies and regulatory requirements.

Perform cloud security assessments, architecture reviews and confifiguration reviews across Microsoft Azure, AWS and Google Cloud Platform (GCP).

Assess cloud-native security controls across identity, networking, encryption, logging, monitoring, access management and data protection domains.

Review solution architectures and Solution Architecture Documents (SADs) to identify security risks, control gaps and opportunities for improvement.

Conduct threat modelling activities using established methodologies such as STRIDE and support secure-by-design outcomes.

Assess Infrastructure as Code (IaC) implementations, including Terraform, Bicep and cloud-native deployment templates, to identify security risks and misconfifigurations.

Support the integration of security controls into CI/CD pipelines and DevSecOps practices.

Conduct third-party security assessments, including vendor, SaaS and technology risk reviews.

Collaborate across Identity and Access Management (IAM), Privileged Access Management (PAM), Vulnerability Management, Cloud Security and Governance, Risk and Compliance (GRC) functions.

Prepare high-quality security assessment reports containing clear fifindings, risk ratings and practical remediation recommendations.

Contribute to security governance forums, architecture review boards and transformation initiatives as required.

Ngā Pūkenga | Skills and attributes for success

Cloud Security

Experience conducting cloud security assessments, architecture reviews and risk assessments across enterprise environments.