Global Information Security Policy & Governance Lead

Bluelight Consulting, Llc; Quilmes; On-site; ARS 138,361,000 - 184,482,000; Full time

Job summary

EY Global Information Security Policy, Methodology & Awareness team seeks an experienced Information Security Policy Specialist to help translate security requirements into clear policies, education, and practical guidance. You will maintain a structured global framework for IS policies, collaborate with cross-functional teams, and communicate requirements to technical and non-technical audiences.

A strong background in policy development and regulatory standards is essential, with attention to

Qualifications

• Bachelor’s degree in Information Security or related field.
• Five+ years of experience in security policy, governance, or compliance.
• Experience drafting information security policies, standards, guidelines, processes, or procedures.
• Familiarity with ISO 27000, NIST, PCI DSS, GDPR, SOX.
• Ability to translate security requirements into clear business language.

Responsibilities

• Maintain a global framework for Information Security policies and standards.
• Develop and update IS policies with cross-functional teams.
• Translate technical input into clear, actionable policies.
• Communicate policy requirements via written guidance and presentations.
• Track and report policy program metrics.
• Ensure alignment with EY policies and regulatory requirements.

Skills

Information security concepts

Analytical thinking

Clear communication

Cross-functional collaboration

Stakeholder management

MS Word/Excel/PowerPoint

Education

Bachelor’s degree in Information Security or related field

Tools

Microsoft Word

Microsoft Excel

PowerPoint

Policy management tools (ConvergePoint)

Job description

EY Global Information Security Policy, Methodology & Awareness team seeks an experienced Information Security Policy Specialist to help translate security requirements into clear policies, education, and practical guidance. You will maintain a structured global framework for IS policies, collaborate with cross-functional teams, and communicate requirements to technical and non-technical audiences.

A strong background in policy development and regulatory standards is essential, with attention to