Vulnerability & Compliance Lead — IT Risk & Governance

Ernst & Young Advisory Services Sdn Bhd; Taguig; On-site; PHP 1,634,000 - 2,941,000; Full time

Job summary

EY is seeking an experienced Stay-In-Compliance Consultant to oversee vulnerability management within Enterprise Technology, coordinating with Infosec and product teams to drive remediation and governance across IT functions.

The role emphasizes risk assessment, policy oversight, and reporting with a focus on compliance against established frameworks, aligning with enterprise risk management practices. This is a senior level, India-based opportunity with global collaboration.

Qualifications

• Bachelor or Master’s degree in Information Technology / Engineering.
• 8-10+ years of relevant experience in Service Delivery.
• Strong understanding of IT risk, governance and compliance frameworks.

Responsibilities

• Oversee vulnerability management for ET (excluding Platform Mgmt) and drive remediation plans.
• Collaborate with Infosec, product and engineering teams to implement risk controls.
• Monitor, report and provide insights on compliance status and SLA adherence.
• Develop and deploy governance models to operationalize risk and compliance processes.

Skills

Stakeholder mgmt

GRAC standards

Vulnerability mgmt

IT operations

Project management

Communication skills

Cross-functional collaboration

Problem solving

Leadership

Education

Bachelor or Master’s in IT/Engineering

Job description

EY is seeking an experienced Stay-In-Compliance Consultant to oversee vulnerability management within Enterprise Technology, coordinating with Infosec and product teams to drive remediation and governance across IT functions.

The role emphasizes risk assessment, policy oversight, and reporting with a focus on compliance against established frameworks, aligning with enterprise risk management practices. This is a senior level, India-based opportunity with global collaboration.