Cryptography Security Consultant
About the job
- Have at least two years of experience in cryptography, cybersecurity, IT infrastructure security, security architecture, identity and access management, public key infrastructure, cloud, or related technology areas.
- Have practical knowledge of at least two of the following areas: crypto discovery, crypto inventory, public key infrastructure, certificate management, hardware security modules/key management systems, TLS/mTLS, data encryption, electronic signatures, secrets management, or cloud security.
- Be able to analyze IT environments and work with architecture documentation, configurations, scan results, asset registers, or security-tool data.
- Understand the client's business environment in relation to cybersecurity and cryptography, and communicate technical knowledge clearly to business audiences.
- Be able to formulate practical recommendations, prepare clear client materials, and communicate with technical and business teams.
- Be able to work in project teams, collaborate with colleagues, and organize work in a dynamic environment.
- Have a good command of Polish and English sufficient for project work and preparing documentation and presentations.
- Be curious about technology, accurate, independent, and willing to learn new areas, including post-quantum cryptography and quantum key distribution.
- Be able to use artificial intelligence safely and effectively in daily work.
- Use artificial-intelligence agents and role- and team-specific tools to analyze data, generate recommendations, and design solutions as part of daily project work.
- Participate in consulting and implementation projects in cryptography, post-quantum cryptography, cybersecurity, and IT infrastructure security for large organizations, including financial institutions and regulated entities.
- Help clients identify and classify cryptography used in applications, infrastructure, cloud services, integrations, databases, certificates, and data flows.
- Build and develop clients' crypto inventories or cryptographic bills of materials, including defining data models, attributes, update processes, ownership, and integrations with client tools.
- Analyze and design architectures for public key infrastructure, certificate management and lifecycle management, hardware security modules/key management systems, TLS/mTLS, electronic signatures, and data-encryption mechanisms.
- Prepare maturity assessments, roadmaps, technology recommendations, and implementation documentation for cryptography modernization, crypto agility, and migration to post-quantum algorithms.
- Support client proofs of concept or pilots for crypto discovery, certificate lifecycle management, hardware security modules/key management systems, public key infrastructure, post-quantum cryptography, or quantum key distribution tools, including collaboration with technology vendors.
- Lead workshops with technical and business stakeholders, gather requirements, map processes, and translate technical findings into clear recommendations for decision-makers.
- Co-develop EY methodologies, proposals, expert materials, market analyses, and best practices in cryptography, post-quantum cryptography, and cyber resilience.
- Experience implementing or maintaining public key infrastructure, certificate lifecycle management, hardware security modules, key management systems, electronic-signature systems, crypto-discovery tools, or key-management platforms.
- Knowledge of standards and good practices such as NIST, ISO/IEC 27001, ETSI, FIPS, PCI DSS, CIS, and guidance on crypto agility or post-quantum cryptography.
- Experience with cloud tools and security services from Microsoft Azure, AWS, or Google Cloud, particularly key management, secrets management, and certificate management.
- Basic knowledge of automation or scripting, such as Python, PowerShell, Bash, or APIs, and working with data in Excel or Power BI.
- Certifications or preparation for certifications such as CISM, CCSP, AZ-500, Security+, ISO 27001, or vendor certifications in cloud, security, or public key infrastructure.
- Knowledge of cybersecurity aspects of operational technology environments.
- Knowledge of quantum computing.
About the company
EY is a global professional services firm that offers consulting, assurance (audits), tax, and transaction advisory services to a wide range of clients including corporations, SMEs, and government entities. It earns fees for these services and uses its industry expertise and a worldwide network to help clients optimize operations, manage risk, and achieve sustainable growth. EY differentiates itself through its scale and reach, industry specialization, focus on end-to-end services, strategic alliances, and emphasis on innovation and sustainability, including improving audit quality and addressing digital economy needs and supply chain visibility. The company’s goal is to help clients navigate complex regulatory and business environments, transform finance and tax functions, and drive efficiency and resilience across their operations.
Company Size
1,001-5,000
Company Stage
N/A
Total Funding
N/A
Headquarters
London, United Kingdom
Founded
1991
Get referred to Ernst & Young
See people who can refer or advise you
Simplify's Take
What believers are saying
- EY.ai Agentic for Sales launched March 2, 2026 with Snowflake and Canva.
- EY uses client-zero deployments, scaling Copilot across 400,000 people by May 2026.
- EY’s 2026 AI assurance push monetizes client demand for governance, controls, and risk reviews.
What critics are saying
- Sabah filed RM2.4 billion audit-negligence claims against EY on July 30, 2026.
- EY set aside £188 million in March 2026 after NMC, Shell, and Made.com scrutiny.
- Repeated audit failures can destroy trust, trigger client defections, and shrink the franchise permanently.
What makes Ernst & Young unique
- EY Canvas processes 1.4 trillion journal-entry lines across 160,000 global audits.
- EY-Microsoft invested US$1b+ in May 2026 to industrialize enterprise AI delivery.
- EY launched agentic audit AI on April 7, 2026, spanning Assurance and AI assurance.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Professional Development Budget
Flexible Work Hours
Remote Work Options
Company News
EY added nearly 10,000 staff globally in its 2026 financial year as AI-related revenue surged almost 50%. The Big Four firm's workforce reached 415,000, with most growth concentrated in global delivery services and offshoring centres. The Americas division saw headcount decrease by roughly 4,500, or 5%. Overall global revenue rose 4.7% to $57 billion. EY-Parthenon was the fastest-growing service line, with revenue increasing 7.4% to $6.8 billion, marking a turnaround after two years of minimal growth. Tax revenue rose 6% to $13.8 billion, whilst consulting grew 4.4% to $17.4 billion. The results reflect EY's "All-In" strategy under global chair Janet Truncale, with billions invested in transforming operations and AI services.
An Ernst & Young study found US oil and gas producers reached record production in 2025 while becoming more selective with investments. The analysis of 30 major exploration and production companies, representing 43% of US oil and gas output, showed oil production hit a study-period high, yet reserve additions from extensions and discoveries declined 11% year over year and failed to fully replace production volumes for the first time since 2021. Total capital expenditures fell 49% year over year, whilst M&A spending declined 70%. Exploration spending dropped 11% to $4.8 billion, representing only 3% of total capital expenditures. Natural gas showed stronger fundamentals, with production rising 18%, reserves increasing 14%, and discoveries up 21%.
Ernst & Young's US division is allocating $100 million this fiscal year to bonus payments rewarding employees who demonstrate adaptability, innovation, and judgement. Individual spot awards reach $500, whilst employees or teams making significant contributions can receive between $10,000 and $25,000, five times the previous programme's ceiling. The initiative also covers AI experimentation. "What we recognise signals what we value," said Ginnie Carlier, chief talent and culture officer for EY Americas. The bonuses form part of a broader strategy to reshape employee development across all career levels. Other professional services firms are pursuing similar approaches. KPMG restructured its audit internship this summer to emphasise critical thinking, whilst PwC US introduced training combining AI proficiency with human qualities like empathy. EY reported AI-related revenue grew 30% year-over-year in 2025.
EY-Parthenon has acquired SparkOptimus, a Dutch digital strategy consultancy founded in 2010. The Amsterdam-based firm employs around 50 consultants and specialises in AI transformation, digital business model redesign and technology-driven transformation. SparkOptimus founders Alexandra Jankovich and Tom Voskes, both former McKinsey consultants, said joining EY-Parthenon will create significant value for clients and staff whilst providing access to broader capabilities. The acquisition marks EY-Parthenon's first European deal since 2021. EY-Parthenon, established in 2014, is EY's strategy consulting and transactions advisory business with around 25,000 professionals globally. Mark Reich, Partner at EY-Parthenon Netherlands, said SparkOptimus' expertise will complement existing capabilities in the Dutch market. The deal closes on 1 September 2026. Financial terms were not disclosed.
The UK Government has awarded a contract worth up to £456 million to KPMG and EY to train civil servants, the Financial Times reported, citing government procurement tracker Tussell. Under the arrangement, the firms will train officials across various skills areas, including AI, between 2026 and 2028. KPMG's share is capped at £319 million, representing almost a quarter of its total UK advisory net sales from last year. EY's portion is worth £137 million, equivalent to around 13% of its UK consulting revenue. The deal is the largest single contract awarded to Big Four companies since Tussell started tracking records in 2012. The previous record was a £322 million deal between the Foreign Office and PricewaterhouseCoopers in 2012.