Assistant Director - Inbound Security Assessment & Auditor Response Specialist

Ernst and Young; Cleveland (OH); Hybrid; USD 124,000 - 233,000; Full time

Job summary

An established industry player seeks an Assistant Director for its Client Assurance team in Information Security. This key role involves supporting client requests related to information security and data protection, ensuring compliance with EY's governance program. The ideal candidate will possess strong communication and negotiation skills, along with a solid understanding of information security standards and regulatory requirements. Join a diverse and inclusive culture that empowers you to make a meaningful impact while working with cutting-edge technology solutions. This position offers a unique opportunity to contribute to a better working world while advancing your career in a supportive environment.

Benefits

Medical and Dental Coverage

Pension and 401(k) Plans

Flexible Vacation Policy

Paid Time Off for Holidays

Continuous Learning Opportunities

Transformative Leadership Coaching

Diverse and Inclusive Culture

Qualifications

• Experience with information security assessments and audits.
• Knowledge of security standards and data privacy regulations.

Responsibilities

• Support client inquiries regarding information security governance.
• Review client agreements for compliance with security standards.

Skills

Information Security Assessments

Communication Skills

Negotiation Skills

Risk Assessment

Cloud Security Concepts

Regulatory Compliance

Technical Writing

Education

Bachelor's Degree

Advanced Degree in Computer Science or related field

Tools

ISO 27001/27002

NIST

ITIL

COBIT

Job description

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better. Join us and build an exceptional experience for yourself, and a better working world for all.

The exceptional EY experience. It's yours to build.

EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities.

Technology has always been at the heart of what we do and deliver at EY. We need technology to keep an organization the size of ours working efficiently. We have 300,000 people in more than 140 countries, all of whom rely on secure technology to be able to do their job every single day. Everything from the laptops we use, to the ability to work remotely on our mobile devices and connecting our people and our clients, to enabling hundreds of internal tools and external solutions delivered to our clients. Technology solutions are integrated in the client services we deliver and is key to us being more innovative as an organization.

EY Technology supports our technology needs through three business units:

1. Client Technology (CT) - focuses on developing new technology services for our clients. It enables EY to identify new technology-based opportunities faster and pursue those opportunities more rapidly.
2. Enterprise Technology (ET) – ET supports our Core Business Services functions and will deliver fit-for-purpose technology infrastructure at the cheapest possible cost for quality services. ET will also support our internal technology needs by focusing on a better user experience.
3. Information Security (Info Sec) - Info Sec prevents, detects, responds and mitigates cyber-risk, protecting EY and client data, and our information management systems.

The opportunity

The Client Assurance team within Information Security has an opportunity at an Assistant Director level within the United States to support EY client requests regarding information security and data protection.

The Client Assurance Assistant Director is responsible for supporting all client and regulatory inquiries and activities regarding EY’s information security governance program within their geographic area. You’ll be primarily responsible for assisting EY engagement teams in addressing client requests regarding the security of EY’s traditional and cloud-based technology solutions used to deliver professional services to our clients. Additionally, you’ll be responsible for assisting EY teams in engaging with our regulators by representing EY Information Security in the areas of information security governance and cybersecurity. You’re likely to balance your time between multiple requests and responsibilities, supporting your team on challenging pursuits and engagements while learning about EY’s leading-edge technologies.

This position requires excellent English language speaking, reading and writing abilities. This is not a hands-on technical role and no systems administration or design is involved.

Your key responsibilities

1. Experience responding to information security assessments and/or audits from external parties, auditors or regulators, or conducting information security risk assessments to suppliers.
2. Contribute to the development, implementation and maintenance of Client Security Assurance function.
3. Support client and engagement team security assessment inquiries regarding EY’s Global Information Security Program.
4. Review and provide commentary regarding information security requirements in client contractual agreements to confirm compliance with EY information security standards. Participate in client discussions to negotiate contractual terms.
5. Identify opportunities and execute plans to improve client assurance processes and understand and quantify business impact of those improvements for communication to management.
6. Work independently with minimal oversight from management.
7. Minimal travel required.

Skills and attributes for success

Although this is not a client facing role, the successful candidate will have experience interfacing with external clients. Excellent communication and negotiation skills are key attributes in order to succeed in this position.

To qualify for the role you must have

1. Demonstrated experience responding to information security assessments and/or audits from external parties, auditors or regulators, or conducting information security risk assessments to suppliers.
2. Experience working with common information security standards, such as ISO 27001/27002, NIST, ITIL, COBIT.
3. Understanding of security related regulatory and data privacy concerns globally.
4. Knowledge of cloud security concepts and enterprise federation services.
5. Experience translating information security concepts into business and technical language.
6. Flexibility to adjust to multiple demands, shifting priorities, ambiguity, and rapid change.
7. Fluency in reading, writing and speaking English.

Ideally, you’ll also have a selection of the following

1. An advanced degree in Computer Science, Information Systems, Engineering or a related major.
2. Professional certifications such as CISSP, GIAC, CISM or CISA.
3. Experience in financial services or other highly regulated industry.

What we look for

1. An individual who communicates clearly and with self-confidence.
2. Ability to understand and integrate cultural differences and work effectively in cross cultural teams.
3. Demonstrated integrity and judgment within a professional environment.
4. Outstanding management, interpersonal, communication, organizational, and decision-making skills.
5. The demonstrated characteristics of a forward thinker and self-motivator who thrives on new challenges and adapts to learning new knowledge.

What we offer

The compensation ranges below are provided in order to comply with United States pay transparency laws. Other geographies will follow their local salary guidelines, which may not be a direct conversion of published US salary ranges. We offer a comprehensive compensation and benefits package where you’ll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job in all geographic locations in the US is $124,400 to $232,700. The salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is $149,300 to $264,400. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options. Join us in our team-led and leader-enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year. Under our flexible vacation policy, you’ll decide how much vacation time you need based on your own personal circumstances. You’ll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.

+ Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.

+ Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.

+ Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.

+ Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

EY accepts applications for this position on an on-going basis. If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

For those living in California, please click here (https://ey-preview.ey.com/content/ey-unified-site/ey-com/local/us/en_us/home/legal-and-privacy/fair-chance-ordinance.html?token=68cf9ed2-94e5-4db9-83cf-5c6aa14619de) for additional information.

EY is an equal opportunity, affirmative action employer providing equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.

EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY’s Talent Shared Services Team (TSS) or email the TSS at [e-mail]