Security Consultant (ISO 27001 auditor )

Ernst & Young Advisory Services Sdn Bhd; Amsterdam; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Hybrid working

Laptop and phone

25 vacation days

Pension plan

Mobility budget

Wellbeing platforms

Job summary

EY CertifyPoint in Amsterdam is seeking a Security Consultant to perform certification audits for security and privacy-related controls, helping clients demonstrate compliance with Cybersecurity and GDPR standards. The role combines auditing, workshops and training sessions, with frequent travel.

You will join the Technology Risk team, work with international clients, and have opportunities to develop expertise across ISO27001, NIST and privacy frameworks.

Qualifications

• More than 3 years of auditing experience as a lead auditor in ISO 27001.
• Bachelor's and/or Master's in Computer Science, IT Auditing, Information Systems and/or Privacy Law.
• Advanced knowledge of IT general controls, IT governance processes (ITIL).
• Ability to review security policies and design/implement controls per ISO27001, NIST, SANS.
• Good understanding of cybersecurity standards (ISO, ITIL, NIST, ISF) and GDPR/privacy is advantageous.
• English required; Dutch/German/French proficiency an asset; strong project management and teamwork.

Responsibilities

• Conduct certification audits for security and privacy-related controls for clients.
• Provide workshops and training sessions on related topics.
• Balance auditing, travel, workshops and business development across international clients.

Job description

Security Consultant (ISO 27001 auditor )

Other locations: Primary Location Only

Date: 27 Aug 2026

Requisition ID: 1721953

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Confidence in your impact today. Freedom to build tomorrow. At EY, you can be sure that you’re making a difference – for your client, for society, for your colleagues and for your own development. At the same time, you’ll have the freedom to work in a way that fits your life. Whether you choose to specialize, broaden your expertise or grow into leadership, you’re in the driver’s seat. Together with ambitious colleagues in an open and trusted culture, you aim for the best every day. Big on opportunity, friendly in collaboration. EY provides the resources you need to shape your career and make an impact in your field.

Your new job | About your main responsibilities Our clients are under constant pressure from their customers and stakeholders to demonstrate compliance with Cybersecurity and Privacy/GDPR standards and that's where EY Attestations and Certification assists them via certification services. The team is expanding its certification and implementation services on management systems for a broad range of standards. As a consultant within, you will discover best of two worlds.

As a security consultant, you will primarily be performing certification audits for security and privacy-related controls for our clients, proving workshops and training sessions on related topics.

A role where no two days are the same – so you’ll find yourself taking on plenty of new responsibilities as you go. You’ll work alongside clients and colleagues, balancing your time between auditing, traveling, providing workshops and supporting business development.

You will work in a constantly changing environment. There’s no better place to develop your skills. Since the position is for a team which works on a global scale within EY, there are many international travel opportunities (30-60%).

Your new team | About your colleagues and the office

Within the Technology Risk department, we focus on analyzing IT-systems, processes, and cybersecurity. Our focus area is both on the business and the IT and financial side of large organizations. Specifically, we help make IT-risks transparent and manageable. In this way, we provide society and the financial markets with the confidence that technologies are being used safely, so that, for example, privacy-sensitive and financial data are processed securely. We work closely with financial auditors at clients in various sectors to support the financial statement audit.

Your office in Amsterdam

Our Amsterdam office is located at the Zuidas: a bustling area full of companies. In our Cross Towers, we welcome up to 1,500 people every day. For a breathtaking view of the city, head to the 22nd floor. Collaboration takes on a new meaning in our Wavespace, a high-tech environment that connects clients and colleagues virtually across the globe.

Your skills and strengths | About your unique contribution

• More than 3 years of auditing working experience as a lead auditor in ISO 27001
• Relevant Bachelor's and/or Master's degree in Computer Science, IT Auditing, Information Systems and/ or Privacy Law.
• Advanced knowledge of IT general controls (security, change management, disaster backup recovery, datacenter, infrastructure, etc.), IT governance processes (ITIL).
• Ability to critically review security policies and procedures, design and implementation of security policies, procedures, standards and controls in line with regulation and/or current standards, ISO27001, NIST, SANS.
• Good understanding of industry standards in cybersecurity (ISO, ITIL, NIST, ISF) and privacy (GDPR, ISO 27018) is an advantage.
• Entrepreneurial and problem solving mind and good project management with the ability to collaborate with teams across multiple locations and a strong command of the English language is a must due to the international clientele of EY CertifyPoint. Proficiency in Dutch, German and French would be a great advantage.

Your benefits | About your perks and work enjoyment

• A competitive salary that reflects your role and responsibilities, depending on experience and qualifications;
• In addition to your salary, you’ll receive holiday allowance and an annual bonus (based on performance and development);
• A laptop and phone for both work and personal use, and a monthly internet allowance;
• 25 vacation days to recharge and unwind, plus the option to buy extra days;
• With the mobility budget, you decide how you travel. Choose a lease car, a discounted public transport subscription, or arrange transport easily via our app;
• Plus, a solid pension plan for the future;
• At EY, we care about a healthy work-life balance. Hybrid working makes this easier. Whether you're working from the office, at a client, or from home, we’ll make sure you have a well-equipped home office;
• The option to swap 3 national holidays for non-national ones;
• You’ll have the space to grow both personally and professionally. Whether you want to deepen your expertise, develop your personality, or improve your leadership style, we offer a broad range of trainings and courses;
• Your well-being is our priority. We believe that when you feel good, you perform better. That’s why you’ll have access to the OpenUp wellbeing platform (including for your family). You can easily connect with psychologists and lifestyle experts within 36 hours and take part in wellbeing sessions;
• A strong focus on teaming and various internal networks where you can join all kinds of social activities. A positive work atmosphere and good collaboration with colleagues contribute to your overall happiness at work.

All this within an environment where our core values of integrity, inclusiveness, and respect are central. We think it’s important that you can be yourself and fully develop into the best version of yourself.

EY| Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax,strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories

Select how often (in days) to receive an alert:

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.