TC-CS-SRCR-Risk and Compliance-SeniorManager
EY
EY
Join EY's Technology Consulting team as a Senior Manager in Cyber Security and contribute to global client engagements. You'll build and maintain strong relationships while proactively identifying and escalating risks. This role offers a chance to shape a new service offering within a leading firm, ensuring high-quality delivery and fostering a positive learning environment for junior team members.
This position is ideal for a Senior Security Consultant with profound expertise in cyber security, risk, and controls. A deep understanding of industry standards and frameworks such as Unified Compliance Framework, ISO27001, NIST, PCI-DSS, and GDPR is essential. You'll play a key role in driving the growth of a new service line and upholding EY's commitment to excellence.
Lead end-to-end Cyber Maturity Assessment engagements for global clients, evaluating their current cyber maturity against frameworks like Unified Compliance, ISO27K, NIST, PCI-DSS, and GDPR.
Conduct thorough risk analysis and assessments of client-provided information, following up as needed and identifying any required additional data.
Define appropriate risk ratings and scoring based on EY and industry standards, providing clear rationale for each assessment.
Collaborate effectively as a team member, sharing responsibilities, offering support, communicating progress to senior members, and recommending actions based on observations.
Develop strategies and roadmaps to help clients achieve their desired cyber maturity levels post-assessment, addressing identified non-conformities.
A minimum of 15 years of comprehensive experience in Cybersecurity Strategy, Risk, Compliance, and Resilience is required.
Possess a Bachelor's degree in a related field or equivalent professional experience.
Demonstrate strong proficiency in Excel and PowerPoint for reporting and presentations.
Experience in performing end-to-end security assessments, identifying gaps, and defining future states is crucial.
Familiarity with global standards and frameworks including Unified Compliance Framework, ISO27K, GDPR, PCI DSS, and NIST is necessary.
Proven ability to work in client-facing roles, interact with third parties, assess diverse environments (IT and non-IT), and apply cyber security concepts across various sectors.
Must be capable of working independently, scheduling meetings, conducting collaborative interviews, and coordinating with stakeholders for follow-up sessions.
Flexibility to adapt to different work schedules based on client time zones is expected.
EY Global Delivery Services ( EY GDS)
Technology Consulting