Senior Cyber Risk & Compliance Strategist

Ernst & Young Advisory Services Sdn Bhd; Katowice; Hybrid; PLN 180,000 - 260,000; Full time

Job summary

Ernst & Young Advisory Services Sdn Bhd, in Katowice, Poland, seeks a Senior Cybersecurity Risk & Compliance Consultant. The role focuses on evaluating cybersecurity programs, developing risk management and business continuity strategies, and guiding improvements to ensure resilience and regulatory alignment within EY’s CRCR framework.

The candidate will work in a hybrid setup (2 days in office, 3 days remote) and collaborate with cross-functional teams to deliver compliant, secure technology

Qualifications

• Minimum 5 years in Cybersecurity/IT with at least 2 years in Cybersecurity
• Experience with ISO27001/NIST and ISMS governance
• Audits or reviews of ISMS/ITGC
• Experience in Third Party Risk Management (TPRM)
• Cybersecurity governance & enterprise resilience knowledge
• Strong interpersonal skills and teamwork

Responsibilities

• Evaluate the effectiveness and efficiency of clients' cybersecurity and resiliency programs
• Develop and implement risk management strategies and business continuity plans
• Identify deficiencies and deliver actionable recommendations and guidelines
• Coordinate with stakeholders and engagement teams to strengthen cyber controls
• Communicate complex cybersecurity risks to management for informed decisions

Skills

ISO27001/NIST governance

Risk management

ISMS audits/ITGC

TPRM

Cybersecurity governance

Stakeholder engagement

Tools

RSA Archer

SAP GRC

OneTrust

ServiceNow GRC

Job description

Ernst & Young Advisory Services Sdn Bhd, in Katowice, Poland, seeks a Senior Cybersecurity Risk & Compliance Consultant. The role focuses on evaluating cybersecurity programs, developing risk management and business continuity strategies, and guiding improvements to ensure resilience and regulatory alignment within EY’s CRCR framework.

The candidate will work in a hybrid setup (2 days in office, 3 days remote) and collaborate with cross-functional teams to deliver compliant, secure technology