Security Consultant (ISO 27001 auditor )

EY; Netherlands (MO); Hybrid; USD 90,000 - 120,000; Full time

Benefits offered by this job

Competitive salary reflecting role and experience

Holiday allowance and annual bonus

Laptop and phone for work and personal use

25 vacation days plus the option to buy extra days

Mobility budget for travel options

Solid pension plan

Hybrid working environment

Access to a wellbeing platform

Opportunities for personal and professional growth

Internal networks for social activities

Job summary

EY is seeking a security consultant to perform certification audits for clients' security and privacy controls. The role involves conducting workshops and balancing responsibilities across auditing and business development. You'll have the opportunity for significant international travel as part of a global team.

The ideal candidate will have over 3 years of relevant experience, advanced knowledge of cybersecurity standards, and strong fluency in English. Additional language skills in Dutch, German, or French are advantageous.

Qualifications

• More than 3 years of auditing working experience as a lead auditor in ISO 27001.
• Relevant Bachelor's and/or Master's degree in Computer Science, IT Auditing, Information Systems and/or Privacy Law.
• Good understanding of industry standards in cybersecurity (ISO, ITIL, NIST, ISF) and privacy (GDPR, ISO 27018).

Responsibilities

• Perform certification audits for security and privacy-related controls.
• Conduct workshops and training sessions on related topics.
• Balance auditing, traveling, and supporting business development.

Skills

Auditing experience as a lead auditor in ISO 27001

IT governance processes (ITIL)

Critically reviewing security policies and procedures

Understanding of cybersecurity standards (ISO, GDPR)

Strong command of the English language

Proficiency in Dutch, German, and French

Education

Bachelor's and/or Master's degree in Computer Science or related fields

Privacy Law

Job description

Your new job | About your main responsibilities

Our clients are under constant pressure from their customers and stakeholders to demonstrate compliance with Cybersecurity and Privacy/GDPR standards. EY Attestations and Certification assists them via certification services. The team is expanding its certification and implementation services on management systems for a broad range of standards. As a consultant within, you will discover best of two worlds.

As a security consultant, you will primarily be performing certification audits for security and privacy-related controls for our clients, proving workshops and training sessions on related topics.

A role where no two days are the same - so you'll find yourself taking on plenty of new responsibilities as you go. You'll work alongside clients and colleagues, balancing your time between auditing, traveling, providing workshops and supporting business development.

You will work in a constantly changing environment. There's no better place to develop your skills. Since the position is for a team which works on a global scale within EY, there are many international travel opportunities (30-60%).

Your new team | About your colleagues and the office

Within the Technology Risk department, we focus on analyzing IT‑systems, processes, and cybersecurity. Our focus area is both on the business and the IT and financial side of large organizations. Specifically, we help make IT‑risks transparent and manageable. In this way, we provide society and the financial markets with the confidence that technologies are being used safely, so that privacy‑sensitive and financial data are processed securely. We work closely with financial auditors at clients in various sectors to support the financial statement audit.

Your office in Amsterdam

Our Amsterdam office is located at the Zuidas: a bustling area full of companies. In our Cross Towers, we welcome up to 1,500 people every day. For a breathtaking view of the city, head to the 22nd floor. Collaboration takes on a new meaning in our Wavespace, a high‑tech environment that connects clients and colleagues virtually across the globe.

Your skills and strengths | About your unique contribution

• More than 3 years of auditing working experience as a lead auditor in ISO 27001
• Relevant Bachelor's and/or Master's degree in Computer Science, IT Auditing, Information Systems and/ or Privacy Law.
• Advanced knowledge of IT general controls (security, change management, disaster backup recovery, datacenter, infrastructure, etc.), IT governance processes (ITIL).
• Ability to critically review security policies and procedures, design and implementation of security policies, procedures, standards and controls in line with regulation and/or current standards, ISO27001, NIST, SANS.
• Good understanding of industry standards in cybersecurity (ISO, ITIL, NIST, ISF) and privacy (GDPR, ISO 27018) is an advantage.
• Entrepreneurial and problem solving mind and good project management with the ability to collaborate with teams across multiple locations and a strong command of the English language is a must due to the international clientele of EY CertifyPoint. Proficiency in Dutch, German and French would be a great advantage.

Your benefits | About your perks and work enjoyment

• A competitive salary that reflects your role and responsibilities, depending on experience and qualifications.
• In addition to your salary, you'll receive holiday allowance and an annual bonus (based on performance and development).
• A laptop and phone for both work and personal use, and a monthly internet allowance.
• 25 vacation days to recharge and unwind, plus the option to buy extra days.
• With the mobility budget, you decide how you travel. Choose a lease car, a discounted public transport subscription, or arrange transport easily via our app.
• Plus, a solid pension plan for the future.
• At EY, we care about a healthy work‑life balance. Hybrid working makes this easier. Whether you're working from the office, at a client, or from home, we'll make sure you have a well‑equipped home office.
• The option to swap 3 national holidays for non‑national ones.
• You'll have the space to grow both personally and professionally. Whether you want to deepen your expertise, develop your personality, or improve your leadership style, we offer a broad range of trainings and courses.
• Your well‑being is our priority. We believe that when you feel good, you perform better. That's why you'll have access to the OpenUp wellbeing platform (including for your family). You can easily connect with psychologists and lifestyle experts within 36 hours and take part in wellbeing sessions.
• A strong focus on teaming and various internal networks where you can join all kinds of social activities. A positive work atmosphere and good collaboration with colleagues contribute to your overall happiness at work.