Senior Information Security Analyst — App Security & GRC Lead

EY; Wrocław; Hybrid; PLN 180,000 - 280,000; Full time

Job summary

EY GDS Poland is seeking an Information Security Analyst – Supervising Associate in Wrocław/Katowice. The role supports the Technology Assurance, Risk, and Policy function, performing security reviews, audits, and compliance activities across EY’s technology landscape.

You will collaborate with cross‑functional teams to ensure secure development, testing, and deployment of applications, while advancing EY’s GRC program.

Qualifications

• 5 to 8 years of experience in application security assessment.
• Hands on experience of Web, thick client, Mobile Application security reviews.
• Exposure to various manual testing methodologies and vulnerability assessments.
• Understanding security controls in applications, networks, and systems.

Responsibilities

• Prepare detailed security review reports and remediation guidance.
• Research new application security vulnerabilities and attack vectors.
• Support the team in updating their skills and knowledge.
• Lead strategic initiatives and mentor new team members.
• Continuously improve quality of service.
• Configure, manage, and update vulnerability assessment tools for accurate results.
• Collaborate with development teams to configure self-scan tools in the SDLC.
• Guide developers in interpreting scan results and prioritizing remediation.
• Automate scanning processes within the CI/CD pipeline for continuous security testing.

Skills

Web security testing

Manual testing

Automated testing

Scripting (Python/Perl)

Education

Bachelor's degree in Information Technology or Cyber Security

Tools

Burp Suite

Nmap

Wireshark

Nessus

Echomirage

WebInspect

Qualys WAS

CheckMarx

WhiteSource

Job description

EY GDS Poland is seeking an Information Security Analyst – Supervising Associate in Wrocław/Katowice. The role supports the Technology Assurance, Risk, and Policy function, performing security reviews, audits, and compliance activities across EY’s technology landscape.

You will collaborate with cross‑functional teams to ensure secure development, testing, and deployment of applications, while advancing EY’s GRC program.