Opportunities in Cybersecurity Team (Pentesting / OT Security / CRCR / DPP / IAM)

Ernst & Young Advisory Services Sdn Bhd; Katowice; Hybrid; PLN 120,000 - 160,000; Full time

Job summary

EY GDS Poland invites cybersecurity professionals to join our diverse team engaged in Pentesting, OT Security, CRCR, DPP and IAM projects for global clients. You will work with experienced colleagues across regions, contributing to security assessments, governance, and secure transformation efforts.

The role emphasizes collaboration with cross-functional teams, continuous learning, and delivery excellence in a fast-paced international environment.

Qualifications

• 3+ years of experience in Cybersecurity, Information Security, IT Risk, Security Engineering, Privacy, Compliance, Identity Management, or related fields.
• Excellent command of English (B2+ preferred).

Responsibilities

• Participate in cybersecurity engagements across domains including Pentesting, OT Security, CRCR, DPP, and IAM.
• Collaborate with clients and project teams to identify security risks and define mitigation strategies.
• Conduct security assessments, reviews and testing activities based on project requirements.
• Prepare reports and presentations for technical and non-technical stakeholders.
• Support workshops, proof-of-concepts and transformation initiatives.

Skills

Cybersecurity foundations

Threat analysis

Stakeholder management

Communication skills

Problem-solving

International exposure

Tools

PAM solutions

IAM governance tools

Job description

Opportunities in Cybersecurity Team (Pentesting / OT Security / CRCR / DPP / IAM)

Other locations: Primary Location Only

Date: 21 Sept 2026

Requisition ID: 1746320

Opportunities in Cybersecurity Team (Pentesting / OT Security / CRCR / DPP / IAM)

Location: Katowice - 2 days office / 3 days remote

Let us introduce you the job offer by EY GDS Poland – a member of the global integrated service delivery center network by EY.

The opportunity

As a Cybersecurity Consultant or Senior Consultant, you will contribute to a broad portfolio of cybersecurity projects supporting global organizations across various industries. Depending on your expertise and interests, you will join one of our specialized teams, including Penetration Testing, Operational Technology (OT) Security, Cyber Risk & Compliance (CRCR), Data Protection & Privacy (DPP), or Identity & Access Management (IAM).

You will work alongside experienced cybersecurity professionals supporting clients in strengthening their security posture, addressing cyber risks, meeting regulatory requirements, and enabling secure digital transformation initiatives. The role offers opportunities to work with cutting-edge technologies, global delivery teams, and international clients while developing expertise in one or more cybersecurity domains.

Your key responsibilities

• Participate in cybersecurity engagements across one or more domains, including Pentesting, OT Security, Cyber Risk & Compliance, Data Protection & Privacy, and Identity & Access Management.
• Collaborate with clients and project teams to identify security risks, define mitigation strategies, and support implementation of security improvements.
• Conduct security assessments, reviews, testing activities, and compliance evaluations based on project requirements.
• Support the design, implementation, and enhancement of cybersecurity processes, controls, and governance frameworks.
• Analyze technical and business requirements and translate them into practical security solutions.
• Contribute to security architecture reviews, risk analysis activities, and control validation exercises.
• Prepare reports, documentation, and presentations for technical and non-technical stakeholders.
• Participate in workshops, proof-of-concepts, and transformation initiatives supporting clients' cybersecurity maturity.
• Collaborate with global teams to identify emerging threats, best practices, and innovative security solutions.
• Support post-assessment reviews and continuous improvement initiatives to enhance overall security effectiveness.

Skills and attributes for success

• Strong cybersecurity foundations with the ability to translate technical findings into business risks and actionable recommendations.
• Analytical mindset and the ability to assess security threats, vulnerabilities, and control effectiveness.
• Ability to work effectively with both technical and business stakeholders.
• Strong communication, consulting, and problem-solving skills.
• Passion for cybersecurity, emerging technologies, and continuous professional development.
• Ability to thrive in a fast-paced and international environment.

To qualify for the role, you must have

• 3+ years of experience in Cybersecurity, Information Security, IT Risk, Security Engineering, Privacy, Compliance, Identity Management, or related fields.

Experience in one or more of the following areas:

• Penetration Testing and Security Assessments
• Operational Technology (OT)
• Cyber Risk, Governance, Risk & Compliance (GRC), Regulatory Compliance
• Data Protection, Privacy, GDPR, or Information Governance
• Identity & Access Management (IAM), Access Governance, PAM, or Authentication Technologies
• Knowledge of cybersecurity frameworks, standards, and industry best practices.
• Strong stakeholder management and communication skills.
• Excellent command of English (B2+ preferred).

Ideally, you’ll also have

• Experience with cloud security platforms and modern enterprise architectures.
• Knowledge of ISO 27001, NIST, CIS, IEC 62443, GDPR, DORA, NIS2, or other relevant industry standards.
• Experience with vulnerability management, threat modeling, threat intelligence, detection engineering, or security operations.
• Hands‑on experience with identity platforms, PAM solutions, IAM governance tools, or Zero Trust initiatives.
• Experience securing industrial environments, connected systems, or critical infrastructure.
• Relevant security certifications such as CISSP, CISM, CRISC, CEH, OSCP, AZ-500, SC-200, SC-300, Security+, CDPSE, CIPM, or equivalent.
• Experience working in Agile delivery environments and international projects.

What we look for

We are looking for cybersecurity professionals who are passionate about helping organizations manage risk, protect critical assets, and strengthen their security posture. Whether your expertise lies in offensive security, OT security, cyber risk and compliance, data protection and privacy, or identity and access management, you should demonstrate strong analytical thinking, a client‑focused mindset, and a commitment to continuous learning. Your contributions will help our clients navigate an evolving threat landscape while supporting secure business growth and digital transformation.

What we offer

EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across nine locations – Argentina, Hungary, India, the Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom – and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well‑known brands from across the globe. We’ll introduce you to an ever‑expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture:You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

About EY

EY | Building a better working world

EY exists to build a better working world, helping to create long‑term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

The exceptional EY experience. It’s yours to build.

In compliance with the requirements of the Whistleblower Protection Act, our company has established theProcedure for reporting breaches of law and undertaking appropriate follow‑up actions.Any misconduct should be reported through the EY Ethics Hotline.

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.