Assistant Director - Inbound Security Assessment & Auditor Response Specialist

EY; Philadelphia (Philadelphia County); On-site; USD 124,000 - 233,000; Full time

Job summary

An established industry player is seeking an Assistant Director to lead inbound security assessments and auditor responses. This pivotal role involves engaging with clients on security governance and compliance, ensuring adherence to security standards, and translating complex security concepts into business language. Ideal candidates will possess strong communication and negotiation skills, along with a solid background in security assessments. Join a dynamic team that values diversity and offers a flexible work environment, making a significant impact in the realm of information security.

Qualifications

• Experience with security assessments, audits, or risk assessments.
• Fluency in English required for effective communication.

Responsibilities

• Respond to external security assessments and audits.
• Support development of the Client Security Assurance function.
• Review security requirements in contracts and negotiate terms.

Skills

External Security Assessments

Communication Skills

Negotiation Skills

Knowledge of ISO 27001/27002

Understanding of Global Data Privacy

Education

Advanced Degree in Computer Science

Certifications (CISSP, GIAC, CISM, CISA)

Job description

Assistant Director - Inbound Security Assessment & Auditor Response Specialist

Join us at EY as an Assistant Director - Inbound Security Assessment & Auditor Response Specialist. We are looking for a candidate to support client inquiries regarding information security and data protection, primarily focusing on security assessments, audits, and regulatory engagements.

This role involves supporting EY teams in addressing client requests related to our information security governance program, engaging with regulators, and ensuring compliance with security standards. It is a non-technical role requiring excellent communication skills and experience in responding to external security assessments.

Key Responsibilities

• Respond to external security assessments, audits, and risk evaluations.
• Support development and maintenance of the Client Security Assurance function.
• Assist in client and engagement team inquiries regarding EY’s security programs.
• Review security requirements in contracts and negotiate terms with clients.
• Identify opportunities to improve assurance processes and communicate business impacts.
• Work independently with minimal oversight.

Qualifications

• Experience with external security assessments, audits, or risk assessments.
• Knowledge of security standards such as ISO 27001/27002, NIST, ITIL, COBIT.
• Understanding of global data privacy and regulatory concerns.
• Knowledge of cloud security and enterprise federation services.
• Ability to translate security concepts into business language.
• Excellent communication and negotiation skills.
• Fluency in English (reading, writing, speaking).

Preferred Qualifications

• Advanced degree in Computer Science, Information Systems, or related fields.
• Certifications such as CISSP, GIAC, CISM, or CISA.
• Experience in highly regulated industries like financial services.

Additional Information

This is a full-time, mid-senior level position based in the United States, with minimal travel. The salary range is $124,400 to $232,700, with additional benefits and a flexible work environment.

We encourage candidates who meet the criteria to apply promptly. EY is an equal opportunity employer committed to diversity and inclusion.