Hybrid Senior Cybersecurity Risk & Compliance Lead

Ernst & Young Advisory Services Sdn Bhd; Katowice; Hybrid; PLN 180,000 - 240,000; Full time

Job summary

EY GDS Poland is seeking a Senior Cybersecurity Risk & Compliance Consultant in Katowice, with 2 days in the office and 3 days remote. You will help EY clients evaluate cybersecurity and resiliency programs while aligning with business growth and operations strategies.

The role requires strong knowledge of ISMS, governance, and risk management and the ability to translate complex risks into actionable guidance for senior management.

Qualifications

• Minimum 5 years of experience in Cybersecurity or IT with at least 2 years in cybersecurity.
• Experience implementing risk management plans and business continuity.
• Experience auditing ISMS or IT general controls.
• Experience in Third-Party Risk Management (TPRM).
• Ability to communicate cybersecurity risks to management.

Responsibilities

• Evaluate effectiveness of clients' cybersecurity and resiliency programs.
• Develop and implement risk management strategies and business continuity plans.
• Identify deficiencies and deliver actionable recommendations.
• Collaborate with stakeholders to improve cyber resilience.

Skills

ISO27001

NIST

ISMS governance

Risk assessment

TPRM

Cyber governance

Tools

RSA Archer

SAP GRC

OneTrust

ServiceNow GRC

Job description

EY GDS Poland is seeking a Senior Cybersecurity Risk & Compliance Consultant in Katowice, with 2 days in the office and 3 days remote. You will help EY clients evaluate cybersecurity and resiliency programs while aligning with business growth and operations strategies.

The role requires strong knowledge of ISMS, governance, and risk management and the ability to translate complex risks into actionable guidance for senior management.