Assistant Director - Inbound Security Assessment & Auditor Response Specialist

Ernst and Young; City of Rochester (NY); On-site; USD 124,000 - 233,000; Full time

Job summary

Join a forward-thinking organization where you can leverage your expertise in information security and client assurance. As an Assistant Director, you'll play a pivotal role in supporting client requests and regulatory inquiries, ensuring the integrity of security governance. This position emphasizes excellent communication and negotiation skills, allowing you to work independently while contributing to a collaborative team environment. With a strong focus on technology and innovation, this role offers a unique opportunity to make a significant impact in a dynamic setting. If you're ready to take the next step in your career and help shape a better working world, this is the role for you.

Benefits

Medical Coverage

Dental Coverage

Pension Plans

401(k) Plans

Paid Time Off

Qualifications

• Experience responding to information security assessments and audits.
• Knowledge of cloud security concepts and regulatory concerns.

Responsibilities

• Support client inquiries regarding information security governance.
• Contribute to the development of Client Security Assurance functions.
• Review information security requirements in client agreements.

Skills

Information Security Assessments

Communication Skills

Negotiation Skills

Regulatory Knowledge

Cloud Security Concepts

Education

Advanced Degree in Computer Science or related field

Tools

ISO 27001/27002

NIST

ITIL

COBIT

Job description

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better. Join us and build an exceptional experience for yourself, and a better working world for all.

The exceptional EY experience. It's yours to build.

EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities.

Technology has always been at the heart of what we do and deliver at EY. We need technology to keep an organization the size of ours working efficiently. We have 300,000 people in more than 140 countries, all of whom rely on secure technology to be able to do their job every single day. Technology solutions are integrated in the client services we deliver and is key to us being more innovative as an organization.

EY Technology supports our technology needs through three business units:

1. Client Technology (CT) - focuses on developing new technology services for our clients.
2. Enterprise Technology (ET) – ET supports our Core Business Services functions and will deliver fit-for-purpose technology infrastructure.
3. Information Security (Info Sec) - Info Sec prevents, detects, responds and mitigates cyber-risk, protecting EY and client data.

The opportunity

The Client Assurance team within Information Security has an opportunity at an Assistant Director level within the United States to support EY client requests regarding information security and data protection.

The Client Assurance Assistant Director is responsible for supporting all client and regulatory inquiries and activities regarding EY’s information security governance program. You’ll assist EY engagement teams in addressing client requests regarding the security of EY’s traditional and cloud-based technology solutions. You’ll also engage with our regulators by representing EY Information Security.

This position requires excellent English language speaking, reading and writing abilities. This is not a hands-on technical role.

Your key responsibilities

1. Experience responding to information security assessments and/or audits.
2. Contribute to the development, implementation and maintenance of Client Security Assurance function.
3. Support client and engagement team security assessment inquiries.
4. Review and provide commentary regarding information security requirements in client contractual agreements.
5. Identify opportunities and execute plans to improve client assurance processes.
6. Work independently with minimal oversight from management.
7. Minimal travel required.

Skills and attributes for success

Although this is not a client facing role, the successful candidate will have experience interfacing with external clients. Excellent communication and negotiation skills are key attributes in order to succeed in this position.

To qualify for the role you must have

1. Demonstrated experience responding to information security assessments and/or audits.
2. Experience working with common information security standards, such as ISO 27001/27002, NIST, ITIL, COBIT.
3. Understanding of security related regulatory and data privacy concerns globally.
4. Knowledge of cloud security concepts and enterprise federation services.
5. Experience translating information security concepts into business and technical language.
6. Flexibility to adjust to multiple demands and rapid change.
7. Fluency in reading, writing and speaking English.

Ideally, you’ll also have a selection of the following

1. An advanced degree in Computer Science, Information Systems, Engineering or a related major.
2. Professional certifications such as CISSP, GIAC, CISM or CISA.
3. Experience in financial services or other highly regulated industry.

What we look for

1. An individual who communicates clearly and with self-confidence.
2. Ability to understand and integrate cultural differences and work effectively in cross cultural teams.
3. Demonstrated integrity and judgment within a professional environment.
4. Outstanding management, interpersonal, communication, organizational, and decision-making skills.
5. The demonstrated characteristics of a forward thinker and self-motivator.

What we offer

The compensation ranges below are provided in order to comply with United States pay transparency laws. We offer a comprehensive compensation and benefits package where you’ll be rewarded based on your performance. The base salary range for this job in all geographic locations in the US is $124,400 to $232,700. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.

EY accepts applications for this position on an on-going basis. If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

EY exists to build a better working world, helping to create long-term value for clients, people and society.

EY is an equal opportunity, affirmative action employer providing equal employment opportunities to applicants and employees.