Join EY's Information Security team as an IAM Vulnerability Manager and play a crucial role in protecting our global information assets. This position is key to the Identity and Access Management (IAM) organization, ensuring the security and integrity of systems used by over 400,000 individuals worldwide. You'll be instrumental in managing the entire vulnerability lifecycle for IAM services, platforms, and assets, collaborating with various global teams to maintain a robust security posture. This role offers significant opportunities for skill development and career progression within a supportive and dynamic international environment.

We are seeking dedicated, security-focused individuals to contribute to innovative, secure solutions that drive business value and speed to market. As part of our global team, you will help protect the EY brand and build client trust by enabling secure operations and responding effectively to security events.

This role involves comprehensive vulnerability management for IAM services. Key responsibilities include:

- Coordinating vulnerability intake, triage, and validation of scope, assets, and ownership. - Prioritizing vulnerabilities based on severity, risk, and SLA requirements. - Assigning vulnerabilities to appropriate technical groups and confirming remediation ownership. - Defining and maintaining governance routines for vulnerability review, escalation, and closure. - Tracking remediation progress, monitoring SLA adherence, and identifying overdue items. - Preparing operational and executive-level reports and developing Power BI dashboards for visibility. - Acting as the primary coordination point for IAM vulnerability management and fostering strong stakeholder relationships. - Escalating critical vulnerabilities through defined channels and promoting awareness of management expectations.

To excel in this role, you should possess:

- A degree in Computer Science, Information Security, or a related field, or equivalent work experience. - 5 to 8 years of experience in Information Technology, Information Security, Cybersecurity, IT Service Management, or Vulnerability Management within a global firm. - Proven experience coordinating enterprise vulnerability remediation activities across multiple teams. - Demonstrated experience with vulnerability reporting, remediation tracking, SLA monitoring, and escalation management. - Expertise in developing executive-level reports, operational metrics, and dashboards. - A solid understanding of IT Service Management (ITSM) processes and service governance practices. - Strong analytical, communication, and relationship-building skills. - The ability to work effectively in a fast-paced, dynamic, and globally dispersed organization.