Manager (ISO27001)

Ernst & Young Advisory Services Sdn Bhd; Amsterdam; Hybrid; EUR 110,000 - 170,000; Full time

Benefits offered by this job

Hybrid working

Annual bonus

Laptop and phone

Internet allowance

34 vacation days

Mobility budget

Pension plan

Wellbeing platform

Training & courses

Job summary

EY CertifyPoint in Amsterdam is seeking a manager to lead certification audits for security and privacy controls. You will guide audit teams, drive business development, and support client audits across international engagements.

You’ll work in a dynamic, globally connected Technology Risk team, balancing travel with a hybrid working model, and you’ll mentor auditors while shaping EY’s market position in cyber and privacy certifications.

Qualifications

• 5+ years hands-on audit experience with ISO 27001.
• Relevant Master's degree in Computer Science, IT Auditing, Information Systems and/ or Privacy Law.
• Ability to create and lead business development opportunities.
• Lead and manage a team of auditors, and help them develop and enhance their own skills.
• Knowledge of IT auditing and advanced knowledge of IT general controls (security, change management, disaster backup recovery, datacenter, infrastructure, etc.), IT governance processes (ITIL) is a plus.
• Good understanding of industry standards in cybersecurity (ISO, ITIL, NIST, ISF) and privacy (GDPR, ISO 27018) is an advantage.
• Entrepreneurial and problem solving mind and good project management with the ability to collaborate with teams across multiple locations and a strong command of the English language is a must due to the international clientele of EY CertifyPoint.
• Currently looking for candidates whith strong communication skills in French.

Responsibilities

• Perform certification audits for security and privacy-related controls for our clients.
• Lead and manage a team of auditors and support their development.
• Balance business development with client audits and workshops.
• Provide training sessions on related topics.
• Travelling internationally to work on client engagements.

Skills

Audit experience

ISO 27001

Leadership

French

English

IT auditing

IT governance (ITIL)

Business development

Project management

Communication

Education

Master's degree in Computer Science / IT Auditing / Privacy Law

Tools

ITIL

NIST

SANS

GDPR

Job description

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

Confidence in your impact today. Freedom to build tomorrow.
At EY, you can be sure that you’re making a difference – for your client, for society, for your colleagues and for your own development. At the same time, you’ll have the freedom to work in a way that fits your life. Whether you choose to specialize, broaden your expertise or grow into leadership, you’re in the driver’s seat. Together with ambitious colleagues in an open and trusted culture, you aim for the best every day. Big on opportunity, friendly in collaboration. EY provides the resources you need to shape your career and make an impact in your field.

Your new job | About your main responsibilities

Our clients are under constant pressure from their customers and stakeholders to demonstrate compliance with Cybersecurity and Privacy/GDPR standards and that's where EY Attestation and Certifications assists them via certification services. The team is expanding its certification and implementation services on management systems for a broad range of standards. As a manager, you will discover the best of two worlds. You will be part of a team that offers certification services and advice to national and international clients in the telecom, technology and media sector among others.

You will combine your subject matter expertise with your leadership skills, guide teams through complex projects, and contribute to the development of our services and market position globally. You will also perform certification audits for security and privacy-related controls for our clients, proving workshops and training sessions on related topics.

A role where no two days are the same – so you’ll find yourself taking on plenty of new responsibilities as you go. You’ll work alongside clients and colleagues, balancing your time between business development, traveling, providing workshops and supporting client audits.

You will work in a constantly changing environment. Since the position is for a team which works on a global scale within EY, there are international travel opportunities.

Your new team | About your colleagues and the office

Within the Technology Risk department, we focus on analyzing IT-systems, processes, and cybersecurity. Our focus area is on the business, IT and financial side of large organizations. Specifically, we help make IT-risks transparent and manageable. In this way, we provide society and the financial markets with the confidence that technologies are being used safely, for example, privacy-sensitive and financial data are processed securely. We work closely with financial auditors at clients in various sectors to support the financial statement audit.

Your office in Amsterdam

Our Amsterdam office is located at the Zuidas: a bustling area full of companies. In our Cross Towers, we welcome up to 1,500 people every day. For a breathtaking view of the city, head to the 22nd floor. Collaboration takes on a new meaning in ourWavespace, a high-tech environment that connects clients and colleagues virtually across the globe.

Your skills and strengths | About your unique contribution

• Have 5+ years of hands on audit experience with ISO 27001.
• Relevant Master's degree in Computer Science, IT Auditing, Information Systems and/ or Privacy Law.
• Ability to create and lead business development opportunities.
• Lead and manage a team of auditors, and help them develop and enhance their own skills.
• Knowledge of IT auditing and advanced knowledge of IT general controls (security, change management, disaster backup recovery, datacenter, infrastructure, etc.), IT governance processes (ITIL) is a plus.
• Ability to critically review security policies and procedures, design and implementation of security policies, procedures, standards and controls in line with regulation and/or current standards, ISO27001, NIST, SANS.
• Good understanding of industry standards in cybersecurity (ISO, ITIL, NIST, ISF) and privacy (GDPR, ISO 27018) is an advantage.
• Entrepreneurial and problem solving mind and good project management with the ability to collaborate with teams across multiple locations and a strong command of the English language is a must due to the international clientele of EY CertifyPoint.
• Currently looking for candidates whith strong communication skills in French.

Your benefits | About your perks and work enjoyment

• A competitive salary that reflects your role and responsibilities, depending on experience and qualifications;
• In addition to your salary, you’ll receive holiday allowance and an annual bonus (based on performance and development);
• A laptop and phone for both work and personal use, and a monthly internet allowance;
• 34 vacation days to recharge and unwind, plus the option to buy extra days;
• With the mobility budget, you decide how you travel. Choose a lease car, a discounted public transport subscription, or arrange transport easily via our app;
• Plus, a solid pension plan for the future;
• At EY, we care about a healthy work-life balance. Hybrid working makes this easier. Whether you're working from the office, at a client, or from home, we’ll make sure you have a well-equipped home office;
• The option to swap 3 national holidays for non-national ones;
• You’ll have the space to grow both personally and professionally. Whether you want to deepen your expertise, develop your personality, or improve your leadership style, we offer a broad range of trainings and courses;
• Your well-being is our priority. We believe that when you feel good, you perform better. That’s why you’ll have access to the OpenUp wellbeing platform (including for your family). You can easily connect with psychologists and lifestyle experts within 36 hours and take part in wellbeing sessions;
• A strong focus on teaming and various internal networks where you can join all kinds of social activities. A positive work atmosphere and good collaboration with colleagues contribute to your overall happiness at work.

All this within an environment where our core values of integrity, inclusiveness, and respect are central. We think it’s important that you can be yourself and fully develop into the best version of yourself.

Ready to shape your future with us?| About your application process

• For this vacancy, we only ask for your CV. This way, it’s quick and easy to apply.
• Our first contact:After your application, our recruiter will call you within 2 days for a short introduction. We’ll explore whether the role could be a good match.
• First interview:Before the interview, we’ll ask you to complete an online assessment. Not a standard questionnaire, but a game-based assessment focusing on both your cognitive skills and behavioral preferences. We’ll discuss the results during the interview, which will include a colleague from the relevant department. This mutual introduction is a chance for us to get to know you, and for you to ask any questions you have.
• Second interview:If we see a match and you’re still enthusiastic, we’ll invite you for a second interview. We’ll dive deeper into the role and other relevant topics. Sometimes, a business case is part of the process. A final interview may also follow.
• We’re a match.You’ll receive an offer and we’ll perform a pre-employment screening. Then your new adventure begins. Welcome to EY!

EY| Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax,strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories

Select how often (in days) to receive an alert:

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.