Join EY as a Senior Information Security Analyst and contribute to a global team dedicated to protecting information assets. This role is pivotal in managing risks, ensuring compliance, and enabling secure business operations through innovative security solutions. You'll be part of a dynamic environment focused on building trust and delivering exceptional value.

Our Information Security professionals are crucial in safeguarding EY and client data. We blend risk strategy, digital identity, cyber defense, and technology solutions to cover the entire security lifecycle. You will collaborate with a team of security-focused individuals committed to providing secure, high-value solutions that accelerate market delivery.

Key responsibilities include developing comprehensive information security technical audit plans, maintaining the firm’s Information Security Management System (ISMS) through ISO 27001 activities, and training stakeholders on audit processes. You will also support the technology SQM program, schedule and facilitate security audits and penetration tests, and coordinate internal pre-assessments for external certifications. Effective collaboration with IT, compliance, and other internal teams is essential for aligning audit activities with organizational goals. Facilitating communication with third-party vendors regarding audit results and remediation efforts is also a core part of the role, alongside maintaining detailed documentation of vulnerabilities and risk mitigation strategies.

A minimum of five years of experience in information security or technology audit is required. You should possess a detailed understanding of assurance audits, certifications, and frameworks such as ISAE 3402, SOC1, SOC2, ISO 42001, and ISO 27001. Working knowledge of network and application penetration testing, coupled with the ability to communicate vulnerabilities effectively to diverse audiences, is necessary. Maintaining an awareness of the current security threat landscape and demonstrating strong analytical, communication, and interpersonal skills are crucial for success in this role. The ability to multitask, prioritize duties, and quickly grasp complex technical concepts is also a key requirement.