EY is a global leader in assurance, tax, transaction, and advisory services, with technology integral to our operations and client offerings. We are investing significantly in technology and innovation to guide clients toward sustainable growth and new ways of working. Join Enterprise Technology at EY to be at the forefront of technological integration, fostering your growth and providing exciting learning opportunities.

As an ET SIC Reporting Analyst, you will support vulnerability management reporting for Enterprise Technology (excluding Platform Management), ensuring accurate and timely compliance insights. This role involves close collaboration with global ET, Infosec, and business teams to align reporting with risk frameworks. You will monitor progress against vulnerability management goals, validate remediation efforts, and provide compliance status through regular assessments and dashboards.

Key responsibilities include preparing and maintaining global vulnerability management compliance reports, consolidating and validating vulnerability data, and monitoring compliance within established SLAs. You will prepare weekly/monthly SIC updates and leadership review materials, maintain reporting definitions and controls, and collaborate with Infosec and product managers to understand reporting requirements.

The role also involves maintaining end-to-end reporting views for vulnerabilities, providing reporting support for Critical Vulnerability Response Plan exercises, and producing vulnerability management dashboards and trend analysis. You will act as a reporting conduit between various teams, follow up on data gaps, and provide segmented reporting for specific regions. Additionally, you will identify and highlight risk trends and opportunities for automation and standardization in data preparation and reporting.

To excel in this role, you should possess strong stakeholder relationship management skills, including experience with senior management. A good understanding of industry GRAC, vulnerability management standards, and compliance reporting is essential, along with knowledge of other risk domains like operations risk and IT security.

We are looking for candidates with a solid working knowledge of IT operations, IT practices, and operational reporting. The ability to work independently, deliver high-quality results with minimal direction, and demonstrate high integrity and attention to detail are crucial. Strong problem-solving skills, sound project management and coordination abilities, and excellent communication skills for facilitation, documentation, and reporting are also key.