Senior Cybersecurity Risk & Compliance Consultant

Jobtailor; Wrocław; On-site; PLN 180,000 - 240,000; Full time

Job summary

EY seeks a cybersecurity and risk management professional in Poland to evaluate and enhance clients' cybersecurity and resiliency programs. You will help design and implement ISMS governance practices, audits, and third-party risk management.

The role focuses on ISO27001 and NIST governance, development of risk strategies, and business continuity planning, with emphasis on improving cyber resilience for EY clients in a fast-paced consulting environment.

Qualifications

• Minimum 5 years of experience in cybersecurity and/or IT.
• Expertise in ISO27001, NIST or other ISMS governance systems.
• Experience performing audits or reviews of ISMS systems and/or IT general controls.
• Experience in Third Party Risk Management (TPRM).
• Domain knowledge in Cybersecurity and risk management.
• Demonstrate excellent interpersonal skills.
• Excellent command of the English language, other language would be an asset.

Responsibilities

• Help EY Clients evaluate the effectiveness and efficiencies of their cybersecurity and resiliency programs.
• Play a crucial role in the development and implementation of risk management strategies and business continuity plans.
• Identify deficiencies and deliver recommendations along with guidelines to improve cyber resilience.

Skills

Cybersecurity

ISMS governance

Risk management

Audits

Third party risk management

Interpersonal skills

English proficiency

Tools

ISO27001

NIST

Job description

Responsibilities

• Help EY Clients evaluate the effectiveness and efficiencies of their cybersecurity and resiliency programs
• Play a crucial role in the development and implementation of risk management strategies and business continuity plans
• Identify deficiencies and deliver recommendations along with guidelines to improve cyber resilience.

Requirements

• Minimum 5 years of experience in the field of Cybersecurity and/or Information Technology
• Expertise in ISO27001, NIST or other ISMS governance systems
• Experience performing audits or reviews of ISMS systems and/or IT general controls
• Experience in Third Party Risk Management (TPRM)
• Domain knowledge in Cybersecurity and risk management
• Demonstrate excellent interpersonal skills.
• Excellent command of the English language, other language would be an asset.

Core Competencies

Demonstrates expertise in Cybersecurity and Risk Management, with a strong focus on ISO27001 and NIST governance systems. Proven ability to evaluate and enhance cybersecurity programs, implement risk management strategies, and conduct audits of ISMS systems.