Ernst & Young
Global professional services: consulting, assurance, tax
Associate Partner Solution Architect - Microsoft Cyber Security
Must be able to work in Australia and support clients across geographies as required.
About the job
- Extensive experience in cyber security architecture, cyber transformation, cloud security, security operations, or technology risk consulting.
- Proven experience designing and delivering Microsoft-based cyber security solutions across enterprise or regulated environments.
- A strong understanding of security frameworks and design principles such as Zero Trust, NIST Cybersecurity Framework, ISO 27001, CIS Controls, MITRE ATT&CK, cloud security reference architectures, and secure-by-design delivery.
- Experience leading complex client engagements, pursuits, or programmes in a consulting, advisory, systems integration, or technology services environment.
- Executive stakeholder experience across cyber, technology, risk, and business leadership groups.
- Ability to work in Australia and support clients across geographies as required.
- Deep cyber security architecture experience across security operations, cloud security, identity, data protection, and enterprise security architecture.
- Hands-on credibility with Microsoft Security technologies, particularly Microsoft Sentinel, Microsoft Defender, Microsoft Entra, Microsoft Purview, Microsoft Defender for Cloud, and Azure security services.
- Ability to engage senior executives as a trusted adviser and translate complex cyber and platform topics into clear business narratives, investment cases, and prioritised roadmaps.
- Strong commercial acumen, including experience shaping pursuits, building pipeline, managing alliances, and connecting technology solutions to client outcomes.
- Pragmatic delivery leadership across multidisciplinary teams, including client teams, Microsoft teams, EY delivery teams, offshore capability, and third-party vendors.
- Lead and deliver complex cyber transformation initiatives using Microsoft Security capabilities across Sentinel, Defender XDR, Defender for Cloud, Entra ID, Purview, Intune, Azure, Copilot for Security, and adjacent Microsoft cloud services.
- Translate client risk, regulatory, and business requirements into secure enterprise architectures, reference patterns, and implementation roadmaps across cloud, hybrid, identity, data protection, and security operations environments.
- Work with EY and Microsoft teams to originate opportunities, build joint go-to-market propositions, activate Microsoft funding or field motions where relevant, and convert alliance relationships into measurable pipeline and revenue.
- Engage CISOs, CIOs, CTOs, CROs, and business executives on cyber risk, resilience, operating model choices, investment trade-offs, and value realisation.
- Lead solution design for SOC transformation, SIEM migration, detection engineering, threat hunting, incident response, vulnerability management, automation, SOAR, and AI-enabled analyst workflows using Microsoft Sentinel and related platforms.
- Design solutions integrating Zero Trust, privileged access, identity governance, endpoint protection, data loss prevention, information protection, cloud security posture management, and secure application delivery.
- Own architecture quality, delivery mobilisation, scope clarity, risk management, stakeholder alignment, and value realisation across complex pursuits and programmes.
- Develop reusable cyber offerings, coach high-performing teams, contribute to thought leadership, and help build EY’s Microsoft cyber security market position.
- Modernise security operations using Microsoft Sentinel, Defender XDR, automation, and AI without increasing operational complexity.
- Strengthen cloud, identity, and data security while accelerating digital, AI, and Microsoft platform adoption.
- Reduce cyber risk exposure across critical assets, users, endpoints, workloads, applications, and sensitive data.
- Move from fragmented tooling to an integrated Microsoft Security architecture with clear governance, operating model, and measurable outcomes.
- Align cyber investments to business risk, regulatory expectations, resilience objectives, and board-level confidence.
- Microsoft certifications across Security, Azure, Sentinel, Defender, Entra, Purview, Copilot for Security, or related cloud architecture areas.
- Cyber security certifications such as CISSP, CISM, CCSP, SABSA, GIAC, or equivalent practical experience.
- Experience with SOC transformation, SIEM migration, managed security services, detection engineering, threat intelligence, threat hunting, or incident response.
- Experience in regulated industries such as financial services, energy, government, health, critical infrastructure, or consumer products.
- Experience co-selling, co-delivering, or building solutions with Microsoft field, partner, or engineering teams.
- Familiarity with ServiceNow SecOps, Azure DevOps, Logic Apps, Power Platform, data engineering, or AI-enabled security workflows.
About the company
EY (Ernst & Young) provides professional services at a global scale, offering consulting, assurance, tax, and transaction advisory services. It serves clients across industries such as technology, media, real estate, hospitality, and construction. Instead of selling a single product, EY works with clients through tailored engagements where cross-disciplinary teams analyze challenges, design strategies, perform audits, help with tax planning, and assist with mergers or divestitures. What sets EY apart is its worldwide reach and integrated service model, industry-specific expertise, and focus on responsible business practices like sustainability, cybersecurity, and workforce flexibility. EY’s goal is to help organizations improve performance, manage risk, and achieve sustainable growth while building a better working world.
Company Size
5,001-10,000
Company Stage
N/A
Total Funding
N/A
Headquarters
Boston, Massachusetts
Founded
1991
Get referred to Ernst & Young
See people who can refer or advise you
Simplify's Take
What believers are saying
- EY's January 2026 acquisitions of couniq and Qiado expand public-sector and FAAS consulting.
- EY's April 2026 agentic AI rollout strengthens audit quality and client delivery speed.
- EY's Microsoft alliance and AI assurance services attract transformation work from regulated enterprises.
What critics are saying
- EY paid £105.5 million over NMC Health in 2026, signaling recurring audit liability exposure.
- KPMG, Deloitte, and PwC relentlessly poach EY partners after the failed 2021 split.
- Agentic AI standardizes audit workflows by 2028, compressing billable hours and weakening junior leverage.
What makes Ernst & Young unique
- EY Canvas embeds agentic AI across 160,000 audits with Microsoft Azure, Foundry, and Fabric.
- EY-Parthenon ties consulting, assurance, tax, and transactions into one global client platform.
- EY's sector teams, especially banking and capital markets, deepen specialization across regulated industries.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Professional Development Budget
Flexible Work Hours
Remote Work Options
Company News
Ernst & Young's US division is allocating $100 million this fiscal year to bonus payments rewarding employees who demonstrate adaptability, innovation, and judgement. Individual spot awards reach $500, whilst employees or teams making significant contributions can receive between $10,000 and $25,000, five times the previous programme's ceiling. The initiative also covers AI experimentation. "What we recognise signals what we value," said Ginnie Carlier, chief talent and culture officer for EY Americas. The bonuses form part of a broader strategy to reshape employee development across all career levels. Other professional services firms are pursuing similar approaches. KPMG restructured its audit internship this summer to emphasise critical thinking, whilst PwC US introduced training combining AI proficiency with human qualities like empathy. EY reported AI-related revenue grew 30% year-over-year in 2025.
EY-Parthenon has acquired SparkOptimus, a Dutch digital strategy consultancy founded in 2010. The Amsterdam-based firm employs around 50 consultants and specialises in AI transformation, digital business model redesign and technology-driven transformation. SparkOptimus founders Alexandra Jankovich and Tom Voskes, both former McKinsey consultants, said joining EY-Parthenon will create significant value for clients and staff whilst providing access to broader capabilities. The acquisition marks EY-Parthenon's first European deal since 2021. EY-Parthenon, established in 2014, is EY's strategy consulting and transactions advisory business with around 25,000 professionals globally. Mark Reich, Partner at EY-Parthenon Netherlands, said SparkOptimus' expertise will complement existing capabilities in the Dutch market. The deal closes on 1 September 2026. Financial terms were not disclosed.
The UK Government has awarded a contract worth up to £456 million to KPMG and EY to train civil servants, the Financial Times reported, citing government procurement tracker Tussell. Under the arrangement, the firms will train officials across various skills areas, including AI, between 2026 and 2028. KPMG's share is capped at £319 million, representing almost a quarter of its total UK advisory net sales from last year. EY's portion is worth £137 million, equivalent to around 13% of its UK consulting revenue. The deal is the largest single contract awarded to Big Four companies since Tussell started tracking records in 2012. The previous record was a £322 million deal between the Foreign Office and PricewaterhouseCoopers in 2012.
EY has introduced an "invisible" AI router to manage internal AI spending, helping cut token consumption by up to 60% since its April rollout. The router sits behind specialised AI tools and directs employee queries to the most appropriate model for each task, rather than defaulting to the most powerful option. Token costs have become a growing concern as AI providers increasingly charge based on usage. EY's AI Pulse survey found that 82% of senior leaders at companies investing in AI were worried about token usage. The router has been deployed on department-specific platforms, including tax and risk functions, though not on the general Microsoft Copilot chatbot available to all staff. EY has also implemented token budgets based on employees' roles and departments. The firm's global consulting AI leader Dan Diasio said companies should focus AI investment on areas with the deepest impact rather than spreading resources thinly.
The UK's Financial Reporting Council has fined EY nearly £1.2m and audit partner Julie Carlyle £49,000 for failings in their 2021 audit of Made.com. Both received severe reprimands for breaching international auditing standards regarding going concern and deferred tax assets. The FRC said the auditors relied on management forecasts without sufficient challenge or adequate testing. Made.com, an online furniture retailer that listed on the London Stock Exchange in June 2021, entered administration in November 2022 after reporting a £35.3m loss. EY later disclaimed its opinion on Made.com's 2022 interim statements due to material uncertainty about the company's ability to continue operating.