Americas Tech Risk Leader - Strategy & Data Security

EY; Cleveland (OH); Hybrid; USD 152,700 - 294,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Pension

401(k)

Paid time off

Job summary

EY is seeking America’s Technology Risk Leader to shape technology and data risk posture across the Americas in alignment with EY’s global Information Security strategy.

The role navigates complex business priorities, regulatory expectations and risk scenarios to identify and mitigate significant technology risks while implementing robust controls. Hybrid client-facing work model is expected.

Qualifications

• 15+ years’ experience in Technology Risk Management or related Information Security field.
• Advanced degree in Computer Science, Information Security or related discipline, or equivalent work experience.
• Proficiency in policy and control frameworks such as ISO and COBIT.
• Strong English language skills, with excellent writing and presentation abilities.
• At least 10 years of experience managing senior staff in GRC or related areas.

Responsibilities

• Lead identification, evaluation and mitigation of technology risks across the Americas.
• Serve as steward of the organization’s technology risk posture and secure sponsorship and remediation.
• Lead implementation of controls to prevent data exfiltration across regions and environments.
• Collaborate with stakeholders to translate risk insights into remediation plans.
• Communicate strategy and risk posture to senior management and governance forums.

Skills

Executive presentations

Strategic mindset

Leadership & mentoring

Communication

Stakeholder engagement

Education

Advanced degree in Computer Science or Information Security

Equivalent work experience

Tools

ISO & COBIT frameworks

Job description

EY is seeking America’s Technology Risk Leader to shape technology and data risk posture across the Americas in alignment with EY’s global Information Security strategy.

The role navigates complex business priorities, regulatory expectations and risk scenarios to identify and mitigate significant technology risks while implementing robust controls. Hybrid client-facing work model is expected.