Digital Transformation And Cybersecurity Lead - Industrial

Overseas; Quilmes; On-site; ARS 107,614,000 - 169,108,000; Full time

Job summary

EY is seeking a Global Information Security Policy Specialist to strengthen a security-aware culture by translating security requirements into clear policies, education, awareness, and practical guidance.

You will maintain a global framework for IS policies, collaborate with technical and non-technical stakeholders, and communicate requirements to diverse audiences across the firm.

Qualifications

• Experience translating security requirements into clear policies and guidance.
• Ability to collaborate with stakeholders across a large organization.
• Strong written and verbal communication for technical and non-technical audiences.

Responsibilities

• Maintain a global framework for IS policies and standards throughout their lifecycle.
• Develop, update, and maintain IS policies in collaboration with cross-functional teams.
• Assess IS policy gaps and recommend new or revised requirements.
• Review policies to ensure relevance and accuracy.
• Translate SME, vendor, and industry input into clear IS policies for audiences.
• Align documents with EY policies and standards.
• Communicate policy requirements through written guidance and presentations.
• Contribute to proposals and related materials as needed.
• Track and report IS policy program metrics.

Skills

Analytical thinking

Creativity

Clear communication

Judgment

Job description

Global Information Security Policy Specialist

The Technology Assurance, Risk, and Policy (TARP) function supports a coordinated Governance, Risk, and Compliance (GRC) program that aligns governance, risk management, and compliance activities with EY’s objectives and the evolving cybersecurity landscape.

Within TARP, the Policy, Risk, and Controls (PRC) Enablement & Awareness team establishes and promotes IS policies and standards that safeguard EY’s digital environment. The team also helps communicate and embed those requirements across the organization.

As part of the Global Information Security Policy, Methodology & Awareness team within PRC Enablement & Awareness, you will help strengthen a security-aware culture by translating security requirements into clear policies, education, awareness, and practical guidance.

Your key responsibilities

The Information Security Policy Specialist helps create and maintain EY Global Information Security policies and standards for technology professionals and the wider EY workforce.

Success in this role requires analytical thinking, creativity, sound judgment, and clear communication. You will collaborate with stakeholders across EY to evaluate requirements, develop practical policy solutions, and present recommendations to technical and non-technical audiences.

Key responsibilities include:

• Maintain a structured global framework for managing Information Security policies and standards throughout their lifecycle.
• Develop, update, and maintain IS policies and standards in collaboration with cross-functional teams consisting of both technical and non-technical personnel, drawing on international standards, industry practices, regulatory requirements, and business needs gathered from subject matter experts and key stakeholders across the firm.
• Assess IS policy gaps and recommend new or revised requirements that align EY with business needs and industry practices.
• Review IS policies and standards regularly to validate their relevance, accuracy, and continued applicability.
• Translate input from subject matter experts, vendors, and industry sources into clear, consistent, and actionable IS policies and standards for both technical and non-technical audiences.
• Align Information Security documents and supporting materials with related EY policies and standards.
• Communicate IS policy requirements through clear written guidance, presentations, and stakeholder discussions tailored to relevant audiences.
• Contribute to proposals and related written materials as needed.
• Track and report on IS policy program metrics.

Skills and attributes