Cyber Risk Senior

EY•Atlanta, GA

1d•$87,800 - $182,800

About The Position

EY's consulting risk services provide clients with a candid and reliable overview of their risk landscape, helping them build confidence and trust with customers and the market and meet regulatory or contractual requirements. Within Cyber Risk services, this role identifies, evaluates, and manages cyber risks across organizations, working with IT, security teams, and business units to align cyber risk posture with business objectives and regulatory requirements. The position operates as a fieldwork leader on client engagements, helping clients use information systems, resources, and controls effectively to maximize efficiency and minimize risk. It analyzes and enhances information systems that support internal controls and assists clients and Risk Assurance professionals with information technology control and security engagements. The role also leads cyber risk assessments and mitigation efforts, supports compliance, and communicates risk matters to stakeholders, including senior management and boards. The role is based in one of the listed U.S. offices and requires travel outside the assigned office at least 50% of the time, as well as regional commuting. Successful candidates must be available to work beyond standard hours when necessary and hold a valid passport.

Requirements

A bachelor's or master's degree; a bachelor's degree in Information Technology, Cybersecurity, Risk Management, or a related field is specified.
At least 2 years of experience in cybersecurity, risk management, or a related role.
Strong understanding of cybersecurity frameworks such as NIST and ISO 27001, and of regulatory requirements.
Proven experience with risk assessment methodologies and tools.
Excellent analytical and problem-solving skills.
Strong communication and interpersonal skills, including the ability to explain complex information to non-technical stakeholders.
Ability to work independently and as part of a team in a fast-paced environment.
Availability to travel outside the assigned office at least 50% of the time and commute within the region.
Availability to work beyond standard hours when necessary.
A valid passport.

Nice To Haves

Professional certifications such as CISSP, CISM, CRISC, or similar are highly desirable.
A bachelor's or master's degree in business, accounting, finance, computer science, information systems, engineering, or a related discipline.
CPA, CA, CISA, CISSP, CISM, CBCP, CIA, CIPP, or CGEIT certification is desired; non-certified hires are required to become certified to be eligible for promotion to Manager.
Additional cloud-based certifications: CCSP (Certified Cloud Security Professional), CCSK (Certificate of Cloud Security Knowledge), CCAK (Certificate of Cloud Auditing Knowledge), Microsoft Certified: Azure Fundamentals, AWS Certified Cloud Practitioner, or Google Cloud Digital Leader.

Responsibilities

Collaborate with engagement team members to plan engagements and develop work program timelines, risk assessments, and other planning documents.
Document business processes that depend on information technology.
Direct daily fieldwork progress, inform supervisors of engagement status, and manage staff performance.
Apply knowledge of complex information systems, the current IT environment, and industry IT trends to identify engagement and client service issues.
Communicate IT and client service issues to engagement teams and client management through written correspondence and verbal presentations.
Apply project management skills, promote teamwork and responsibility, and use current technology and tools to improve deliverables and services.
Conduct comprehensive cyber risk assessments to identify vulnerabilities, threats, and potential organizational impacts.
Develop and implement risk mitigation strategies and controls to protect against cyber threats.
Collaborate with IT and security teams to keep cybersecurity policies and procedures current and effectively implemented.
Monitor the cyber threat landscape and provide timely intelligence to relevant stakeholders.
Facilitate risk management discussions with business leaders about their cyber risk exposure.
Oversee the cyber risk management lifecycle, including risk identification, analysis, response, and monitoring.
Coordinate with external partners, including insurance providers and cybersecurity firms, to manage and transfer cyber risks where appropriate.
Prepare and present risk reports and dashboards to senior management and the board of directors.
Ensure compliance with applicable cybersecurity and data protection laws, regulations, and industry standards.
Conduct training and awareness programs to promote a culture of cybersecurity.