Join EY and contribute to building a better working world through a career tailored to your unique strengths. Leverage global scale, support, an inclusive culture, and cutting-edge technology to achieve your full potential.

This role focuses on managing Secure Email Gateway (SEG) operations and Data Access Governance (DAG), requiring a professional with over two years of experience in cybersecurity.

EY is dedicated to creating long-term value for clients, people, and society, fostering trust in capital markets. Through data and technology, diverse global teams provide assurance and help clients grow, transform, and operate effectively.

Administer, monitor, and optimize Secure Email Gateway (SEG) solutions, focusing on Proofpoint and Microsoft Defender for Office 365/EOP. Manage email security policies for anti-phishing, anti-spam, malware, URL defense, attachment sandboxing, and encryption.

Investigate and respond to email security incidents and threats, including user-reported phishing campaigns. Configure and maintain the Varonis Data Security Platform for access governance, permission analysis, and sensitive data monitoring.

Conduct data access reviews and entitlement analysis, addressing excessive or inappropriate permissions. Monitor for anomalous file access, insider threats, and data exfiltration risks using Varonis.

Develop reports and dashboards for email security and data governance controls. Collaborate with SOC, IAM, Infrastructure, and Business teams to enhance security posture and meet compliance needs. Support security audits and risk assessments.

A minimum of two years of experience in Cybersecurity, Email Security, or Data Security domains is essential.

Hands-on proficiency is required with Proofpoint Email Protection, Microsoft Defender for Office 365/EOP, and the Varonis Data Security Platform.

Strong understanding of phishing, malware, email authentication protocols (SPF, DKIM, DMARC), and email threat protection is necessary. Experience in data access governance, file permission management, and data classification is also key.

Knowledge of security operations, incident response, and SIEM integration is required. Excellent troubleshooting, analytical, and stakeholder management skills are vital for this role.