Global Information Security Policy Lead & Awareness

Pomelo; Buenos Aires; On-site; ARS 1,200,000 - 1,800,000; Full time

Job summary

EY Global Information Security Policy Specialist role within the PRC Enablement & Awareness team focuses on translating complex security requirements into clear policies and practical guidance for EY's global workforce.

You'll collaborate with stakeholders worldwide to develop, update and communicate IS policies and standards, align them with international frameworks, and track policy program metrics to drive a security-aware culture.

Qualifications

• Bachelor’s degree or equivalent work experience in Information Security, Cybersecurity, or related field.
• Five+ years of progressive experience in security policy, governance, or information security assurance.
• Experience drafting Information Security policies, standards, or procedures.
• Familiarity with ISO/IEC 27000 series, NIST, PCI DSS, ITIL, COBIT, GDPR, SOX.

Responsibilities

• Create and maintain EY Global Information Security policies and standards for technology professionals and the EY workforce.
• Translate complex input into clear, actionable IS policies and standards for technical and non-technical audiences.
• Collaborate with stakeholders across EY to evaluate requirements and present recommendations.
• Track and report on IS policy program metrics.
• Align information security documents with related EY policies and standards.

Skills

InfoSec concepts

Analytical thinking

Clear communication

Stakeholder management

Cross-functional collaboration

Education

Bachelor’s degree in Information Security or related field

Tools

Microsoft 365

Job description

EY Global Information Security Policy Specialist role within the PRC Enablement & Awareness team focuses on translating complex security requirements into clear policies and practical guidance for EY's global workforce.

You'll collaborate with stakeholders worldwide to develop, update and communicate IS policies and standards, align them with international frameworks, and track policy program metrics to drive a security-aware culture.