IT Environment Support Specialist

EY; Wrocław; Ibrido; PLN 180.000 - 240.000; Tempo pieno

Vantaggi offerti da questo lavoro

Continuous learning

Flexible work environment

Career development

Diverse culture

Descrizione del lavoro

EY GDS Poland is seeking an IT Environment Support Specialist in Wroclaw. The Ops SME will oversee vulnerability management across infrastructure, apps, databases and cloud environments, identifying, assessing and remediating security vulnerabilities while ensuring compliance with cybersecurity policies and risk management standards.

This role requires 7+ years in corporate IT, ITIL framework, ServiceNow, Azure, and strong communication.

Competenze

• Bachelor's degree in Computer Science or a related field is required.
• 7+ years of experience in a corporate IT environment and security remediation.
• Strong understanding of vulnerability management, CVSS, CVEs and risk assessment.

Mansioni

• Lead vulnerability management activities across enterprise systems.
• Review and analyse vulnerability scan results and prioritize remediation.
• Collaborate with application, infrastructure, cloud, and database teams to drive timely fixes.
• Monitor remediation progress and report metrics to management.
• Support audits by providing evidence of vulnerability controls.

Conoscenze

Vulnerability management

Cybersecurity principles

ITIL framework

ServiceNow ITSM

Microsoft Azure

SQL Server/Oracle

English fluent

Formazione

Bachelor's degree in Computer Science or related field

Strumenti

ServiceNow ITSM

Azure Portal

SQL Server

Descrizione del lavoro

Location: Wroclaw - 2 days office/3 days remote

IT Environment Support Specialist

Let us introduce you the job offer by EY GDS Poland – a member of the global integrated service delivery center network by EY.

Job Summary

The Ops SME is responsible for overseeing vulnerability management activities across the organization's infrastructure, applications, databases, and cloud environments. The role focuses on identifying, assessing, tracking, and remediating security vulnerabilities while ensuring compliance with cybersecurity policies, regulatory requirements, and internal risk management standards.

Essential Functions of the Job

• Lead and coordinate end-to-end vulnerability management activities across enterprise systems.
• Review and analyse vulnerability scan results
• Prioritize vulnerabilities based on risk, severity, exploitability, and business impact
• Collaborate with application, infrastructure, cloud, database teams and vendors to drive timely remediation
• Monitor remediation progress and ensure adherence to established SLA requirements
• Prepare and present periodic vulnerability metrics, dashboards, and executive reports
• Support internal and external audits by providing evidence related to vulnerability management controls
• Ensure compliance with cybersecurity policies, security standards, and regulatory requirements
• Coordinate exception management processes and document risk acceptance decisions
• Act as an escalation point for critical and high-risk vulnerabilities
• Required 24/7 on-call support (e.g. escalations, vacation, holiday, weekend coverage)
• Working in a corporate IT environment with multiple disciplines to deliver projects in line with customer needs
• Working in a corporate IT environment in the Operational / Support Service Management role meeting ITIL framework

Analytical/Decision Making Responsibilities

• Ability to prioritize tasks based on criticality.
• Must be able to work within a matrix organization – balancing the needs of the service line against firm initiatives and goals
• Must make decisions, such as prioritize relationships to develop, negotiate with customers and overcome obstacles
• Analyse trends to identify automation and optimization opportunities.
• Identify, manage and resolve complex issues, preventing escalations, where possible.
• Manage, negotiate and resolve risks effectively
• Demonstrate, by example, in-depth knowledge of the EY competency principles and practices, including coaching, learning

and mentoring

• Create an open, honest, accountable and collaborative team environment

Knowledge and Skills Requirements

• Strong understanding of Vulnerability Management and Cybersecurity principles
• High level understanding of service line business processes and application landscape.
• Understanding of CVSS scoring, Common Vulnerabilities and Exposures (CVE), and risk assessment methodologies
• Experience working with .Net Applications, Microsoft Azure, SQL/Oracle Databases
• Knowledge on network security, cloud platforms, and application security
• Relationship management (internal & external stakeholders)
• End to end understanding of IT life cycle (pipeline, resource, demand, project delivery, financial)
• 7+ years of application services and/or client/supplier relationship management in a technology environment
• Good business acumen and ability to negotiate with business partners
• Customer centric mindset and able to manage customer expectations
• Good executive presence
• Ability to develop strategic plans and translate them to actionable roadmaps
• Initiates, builds and maintains productive customer relationships
• Flexibility to adjust to multiple demands, shifting priorities, ambiguity and rapid changeKnowledge of IT Infrastructure – Azure, Windows, SQL Server.
• Basic project management skills. Demonstrates strong understanding of scope, schedule and planning, time management, resource management and cost management.

Supervision Responsibilities

• No direct reports
• Establish AMS governance processes, SOPs, and compliance guidelines.
• Working relationships (daily) with EY ITSD and AMS Lead
• Working relationships (daily) with TCS AMS team and Infosec Team
• ET Liaison

Other Requirements

• Travel may be required (minimal)
• Fluent English speaker
• Excellent communication skills in English

Job Requirements

Education

• A degree in Computer Science and/or a business-related degree; or equivalent work experience

Experience

• 7+ years in a corporate IT environment
• Minimum 3+ years in a corporate IT environment working in the Operational / Support Service Management role meeting ITIL framework.
• Minimum 3+ years in corporate IT environment working in security compliance and vulnerability remediation for Infra including Web/App Servers, DB Servers, Cloud.
• ServiceNow experience for ITIL
• Work experience in a professional services industry, preferred

Certification Requirements

• Certifications in the following industry practices would be a plus (ITIL, BPM, etc)

What we offer

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

About EY

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

In compliance with the requirements of the Whistleblower Protection Act, our company has established the Procedure for reporting breaches of law and undertaking appropriate follow-up actions. Any misconduct should be reported through the EY Ethics Hotline.