Related Posts
More Posts
EXL…. A tatti company. Please don’t ever join.
Who else is waiting for it....

Additional Posts in Cyber Security Bowl
Any thoughts on the CISM certification?
Any tips or tricks for CSX certification?
McKinsey & Company Anyone here working in cyber at McKinsey or BCG? Would be curious to learn about the work you do and whether you’re hiring/referring. Lots of exposure to c-level staff in planning and implementing a cyber strategy, so would be curious about a jump. McKinsey & Company Boston Consulting Group
New to Fishbowl?
unlock all discussions on Fishbowl.



We are busy all the time.
Being in EY cyber, I can confirm.
I'd say no. There may be a big influx of projects with the new financial year but that's it
Back when I didn't understand how to manage WLB it was quite common (first 6 months at the B4).
Now? It's 9-5 and that's it, maybe one late night every month or two.
A lot of my late nights at the beginning of my career at the B4 were self inflicted due to a lack of communication on my end
Typically, you work on your clients schedule though. If it's a tech industry you're clocking out at 4 or 5. If it's a bank or financial institution it may be later hours. That said financial service offerings are usually a seperate group of resources
Imo the stigma that the B4 gets for it's auditors and accountants working absolutely obserd / unhealthy hours does not extend to most areas of tech consulting in the B4
As with everything, it varies greatly depending on what you work on and who you work for and with. As most have said, security tends to just be perpetually busy and there remains a deficit of strong talent in the industry vs. demand.
There are a few pockets of reliable busyness - if you support IT audit with security testing, a lot of that testing occurs in the fourth calendar quarter in advance of first quarter financial audits. If you’re in incident response, my experience doing that kind of work is that we would usually see an uptick during and after major holidays, as fewer people were watching their environments while off. Of course IR work tends to be feast or famine- you’re either working your butts off with long hours or there’s no breach work.
All year round
What are the hours like?
It would be when your client drops rfps or rfp season
IT is a little different than the financial space. You can either be in a reactive IT field or a proactive IT field. Cybersecurity has certain jobs that are reactive and Other jobs that are proactive. If you are in a position that is reactive, you could go long periods of time without doing much. If you are on the proactive side, you may be busy year round.
Short answer, it just depends.
366 days a year