Senior Security Engineer - Hsm & Crypto Infrastructure

JPMorgan Chase & Co.; Buenos Aires; On-site; ARS 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Benefits package

Job summary

EY seeks a Global Information Security Policy Specialist to create and maintain policies and standards for technology professionals and the EY workforce. You will translate security requirements into clear policies and practical guidance, and promote policy adoption across the organization.

Success relies on strong analytical thinking, collaboration with stakeholders globally, and the ability to present policy recommendations to technical and non-technical audiences, aligning with ISO, NIST, and

Qualifications

• Bachelor’s degree in Information Security or related field.
• Five or more years of experience in security policy, governance, or compliance.
• Experience drafting information security policies and standards.
• Familiarity with ISO 27000 series, NIST, PCI DSS, GDPR, SOX.

Responsibilities

• Maintain a structured global framework for managing information security policies and standards.
• Develop, update, and maintain IS policies and standards with cross-functional teams.
• Assess IS policy gaps and recommend new or revised requirements.
• Review IS policies regularly to ensure relevance and accuracy.
• Translate inputs from SMEs into clear, actionable IS policies for technical and non-technical audiences.
• Align information security documents with EY policies and standards.
• Communicate IS policy requirements through guidance, presentations, and stakeholder discussions.
• Contribute to proposals and related written materials as needed.
• Track and report on IS policy program metrics.

Skills

Information security concepts

Analytical thinking

Policy communication

Stakeholder collaboration

Change management

Document drafting

Education

Bachelor’s degree in Information Security or related field

Tools

ConvergePoint

SharePoint

Power BI

Power Apps

MS Office (Word/Excel/PowerPoint)

Job description

Global Information Security Policy Specialist

The Technology Assurance, Risk, and Policy (TARP) function supports a coordinated Governance, Risk, and Compliance (GRC) program that aligns governance, risk management, and compliance activities with EY’s objectives and the evolving cybersecurity landscape.

Within TARP, the Policy, Risk, and Controls (PRC) Enablement & Awareness team establishes and promotes IS policies and standards that safeguard EY’s digital environment. The team also helps communicate and embed those requirements across the organization.

As part of the Global Information Security Policy, Methodology & Awareness team within PRC Enablement & Awareness, you will help strengthen a security-aware culture by translating security requirements into clear policies, education, awareness, and practical guidance.

Your key responsibilities

The Information Security Policy Specialisthelps create and maintain EY Global Information Security policies and standards for technology professionals and the wider EY workforce.

Success in this role requires analytical thinking, creativity, sound judgment, and clear communication. You will collaborate with stakeholders across EY to evaluate requirements, develop practical policy solutions, and present recommendations to technical and non-technical audiences.

Key responsibilities include:

• Maintain a structured global framework for managing Information Security policies and standards throughout their lifecycle.
• Develop, update, and maintain IS policies and standards in collaboration with cross-functional teams consisting of both technical and non-technical personnel, drawing on international standards, industry practices, regulatory requirements, and business needs gathered from subject matter experts and key stakeholders across the firm.
• Assess IS policy gaps and recommend new or revised requirements that align EY with business needs and industry practices.
• Review IS policies and standards regularly to validate their relevance, accuracy, and continued applicable.
• Translate input from subject matter experts, vendors, and industry sources into clear, consistent, and actionable IS policies and standards for both technical and non-technical audiences.
• Align Information Security documents and supporting materials with related EY policies and standards.
• Communicate IS policy requirements through clear written guidance, presentations, and stakeholder discussions tailored to relevant audiences.
• Contribute to proposals and related written materials as needed.
• Track and report on IS policy program metrics.

Skills and attributes for success

• Working knowledge of Information Security concepts and principles for handling and protecting information.
• Strong analytical and research skills, with close attention to detail, and ability to respond to complex challenges with innovative solutions.
• Ability to translate complex technical information into clear business language for technical and non-technical audiences.
• Confident listening, writing, presentation, and influencing skills across departments and levels of the organization.
• Ability to collaborate effectively, build trusted relationships, and work across global, cross-cultural teams.
• Ability to learn new technologies and adapt to shifting priorities, ambiguity, and rapid change.
• Self-directed approach, with the organization and judgment to manage multiple projects and make sound decisions.
• Proficiency in Microsoft Word, Excel, and PowerPoint.
• Integrity and professionalism in handling sensitive information and decisions.
• Demonstrated ability to handle adversity.

To qualify for the role, you must have

• Bachelor’s degree, preferably in Information Security and Assurance, Cybersecurity, Communications, or a related field, or equivalent work experience.
• Five or more years of progressive experience implementing or operating components of a company document management program and document governance practices, or similar role.
• Five or more years of experience in security compliance, IT risk management, IT audit, or Information Security assurance.
• Practical experience drafting Information Security policies, standards, guidelines, processes, or procedures.
• Practical knowledge of one or more relevant frameworks or regulations, such as the ISO/IEC 27000 series, National Institute of Standards and Technology (NIST) guidance, Payment Card Industry Data Security Standard (PCI DSS), Information Technology Infrastructure Library (ITIL), Control Objectives for Information and Related Technologies (COBIT), EU General Data Protection Regulation (GDPR), or Sarbanes-Oxley Act (SOX).
• Demonstrated project management or change management experience.

Ideally, you’ll also have

• Experience managing a policy or standards inventory in a document management or GRC platform, such as ConvergePoint.
• Program or project management experience.
• Experience working in a global virtual environment.
• Experience with Microsoft 365 tools, including SharePoint, Power Apps, and Power BI.
• One or more relevant certifications, or a commitment to pursue them, such as Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Global Information Assurance Certification (GIAC), Certified Security Awareness Practitioner (CSAP), or SANS Security Awareness Professional (SSAP).

What we look for

We look for a curious, collaborative professional who solves problems creatively, remains open to new perspectives, and builds positive relationships across teams, regions, and cultures. You are motivated to grow, improve how work gets done, and deliver high-quality service with a strong focus on stakeholder needs.

What we offer

In this role, you will join a highly coordinated, globally diverse team and gain the tools and opportunities to grow, develop, and move your career forward. You can combine global opportunities with flexible working, supported by an EY benefits package focused on physical, emotional, financial, and social well-being. Your recruiter can explain the benefits available in your country. Here is a snapshot of what we offer:

• Continuous learning: You will develop the mindset and skills to