INV) Senior Consultant , Cybersecurity, Strategy Governance Risk and Compliance, TC, UKI

Location:

London

Other locations:
Primary Location Only

Date: 19 Oct 2026

Requisition

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

EY is seeking an experienced Senior Consultant to join our Cyber Strategy, Governance, Risk and Compliance (GRC) team. You will help organisations define, manage and transform their cyber security capabilities, supporting clients across a range of sectors to address evolving threats, regulatory requirements and business priorities.

As a key member of our team, you will work with clients to develop cyber security strategies, operating models, governance frameworks and transformation roadmaps that enable secure business growth and resilience. You will play an important role in delivering complex client engagements, supporting business development activities and contributing to the continued growth and evolution of EY's Cyber practice.

Working alongside multidisciplinary teams in the UK and globally, you will help clients understand and manage cyber risk, strengthen governance arrangements, improve compliance and translate security ambitions into practical, achievable outcomes. You will also contribute to the development of innovative solutions, thought leadership and industry propositions that address emerging cyber challenges and market demands.

This role offers the opportunity to work across a broad range of cyber and technology topics, engaging with senior stakeholders and helping some of the world's leading organisations build confidence in their cyber resilience.

Your responsibilities will include, but are not limited to:

• Delivering cyber strategy and transformation engagements, supporting clients to define security visions, strategies, target operating models, investment priorities and multi-year transformation roadmaps aligned to business objectives.
• Conducting cyber security maturity, capability and risk assessments, identifying strengths, weaknesses and opportunities for improvement against industry frameworks, regulatory requirements and leading practices.
• Designing and enhancing cyber governance frameworks, including organisational structures, roles and responsibilities, policies, standards, controls, decision-making forums and reporting mechanisms.
• Supporting cyber risk management activities, including risk identification, assessment, quantification, treatment planning and the development of risk management processes aligned to organisational risk appetite.
• Delivering regulatory and compliance engagements, helping clients assess and improve conformance with applicable cyber security, privacy, operational resilience and industry-specific requirements.
• Developing practical recommendations and implementation roadmaps to improve cyber resilience, governance effectiveness and risk management maturity.
• Building and maintaining trusted client relationships, working with senior stakeholders to understand business challenges and translate technical issues into strategic business outcomes.
• Supporting business development activities, including proposals, market propositions, thought leadership and client pursuits.
• Working collaboratively across EY's Cyber and Technology Consulting teams to deliver integrated solutions that address client priorities and maximise value.
• Coaching and supporting junior team members, contributing to team development, knowledge sharing and the continued growth of the Cyber practice.
• Creating high-quality reports as part of a team, for…