Add office photos
Engaged Employer
i
This company page is being actively managed by
Ernst & Young Team. If you also belong to the team, you
can get access from
here
Ernst & Young
Compare
All Filters
2 Ernst & Young Security Jobs
Security Control Assessor
Ernst & Young
posted 1mon ago
Job Role Insights
Flexible timing
Key skills for the job
Job Description
- Plan and build multi-year roadmap to establish and mature the Control Risk Assessment team. This includes development of the team s charter, identification of resource needs, ongoing monitoring systems and tool requirements, and workstream prioritization.
- Build a Control and Risk Assessment program that identifies potential risks and validates mitigation controls by conducting regular and systematic assessments of the organizations IT infrastructure, including networks, systems, applications, and data processes.
- Based on results of assessments and testing, assist control owners with the design and implementation of their controls in the organizations IT environment. Strategize on the appropriate amount of preventive, detective, or corrective controls which will have the most impact on reducing overall risk for the firm.
- Create a 1st Line Testing framework that can be shared with control owners that will enhance security culture and support control ownership roles and responsibilities. Conduct training and awareness campaigns to facilitate the adoption of the framework.
- Appropriately balance firm security needs with business impact and benefit when recommending advancements in policy and control objectives and directing those efforts to completion.
- Think strategically to assist with the development of a long-term vision for Information Security s Technology Assurance, Risk, and Policy direction inclusive of its program improvement, technology adoption, and integration of security solutions into business objectives.
- Act as a thought leader in the firm, staying informed of changes in information security, regulatory requirements, audit standards, and industry trends, adjusting strategies, as necessary.
- Build and maintain appropriate relationships with internal and external leaders to ensure awareness and understanding of potential strategic directions.
- Flexibility to adjust to multiple demands, shifting priorities, ambiguity, and rapid change.
- Outstanding management, interpersonal, communication, organizational, and decision-making skills.
- Ability to understand and integrate cultural differences and motives and to lead cross cultural teams.
- Demonstrate integrity and judgment within a professional environment.
- Evaluate, counsel, mentor and provide feedback on performance of others.
- Plan the training and development of staff to develop their skills and maintain state-of-the-art knowledge in information security.
To qualify for the role you must have
- 10+ years of experience in the Information Technology, Information Security and/or Risk Management field(s).
- Audit experience or a demonstrated ability to design and test technology controls.
- 5+ years of experience in managing and mentoring junior and senior level staff.
- Experience leading global and virtual teams.
- High proficiency in technical and general writing skills in English.
- An advanced degree in Computer Science, Information Security, or a related field; equivalent work experience will be considered on a case-by-case basis.
- One or more of the following or equivalent certifications preferred: Certified Risk and Information Systems Control (CRISC), Certified Information Systems Security Processional (CISSP), Certified Information Security Manager (CISM), Certified Information System Auditor (CISA), Certified Internal Auditor (CIA), Global Information Assurance Certification (GIAC) in related area, CIPP, CIPT.
Ideally, you ll also have
- A working knowledge of external control standards like ISO 27001, NIST 800-53, COBIT, etc. and regulatory requirements like GDPR and SOX.
- Skilled in Microsoft Office and M365 products; primarily Word, Excel, PowerPoint, SharePoint, PowerApps, and PowerBI.
- Experience with RSA Archer or other GRC tools.
- Flexibility to work outside of normal business hours when engaging with team members and stakeholders in various time zones.
Employment Type: Full Time, Permanent
Read full job descriptionPrepare for Security roles with real interview advice
People are getting interviews at Ernst & Young through
People are getting interviews through
(based on 760 Ernst & Young interviews)
Job Portal
Referral
Campus Placement
Company Website
Recruitment Consultant
Walkin
29%
21%
14%
8%
6%
4%
18% candidates got the interview through other sources.
High
Confidence
?
High Confidence means the data is based on a large number of responses received from the candidates.
What Security at Ernst & Young are saying
Security salary at Ernst & Young
reported by
2
employees
with 3
years exp.
₹5.4
L/yr - ₹7
L/yr
67%
more
than the average Security Salary in India
View more details
What Ernst & Young employees are saying about work life
based on 10k employees
Flexible timing
Monday to Friday
No travel
Day Shift
Ernst & Young Benefits
View more benefits
Compare Ernst & Young with
Deloitte
Compare
PwC
Compare
EY Global Delivery Services ( EY GDS)
Compare
Accenture
Compare
Cognizant
Compare
TCS
Compare
Amazon
Compare
Wipro
Compare
Capgemini
Compare
IBM
Compare
Compare
Microsoft Corporation
Compare
Infosys
Compare
KPMG India
Compare
Bain & Company
Compare
McKinsey & Company
Compare
BCG
Compare
ZS
Compare
Mercer
Compare
Willis Towers Watson
Compare
Similar Jobs for you
Ernst & Young Bangalore / Bengaluru Office Locations
Bangalore Office
Ernst & Young, 3rd Floor, Tower C, RMZ Infinity Municipal No. 3, Survey No 1477/2 & 10, Old Madras Road, Benniganahalli, K.R. Puram
Bangalore
Karnataka 560016
Karnataka 560016
Bengaluru Office
Ernst & Young
Tower C, 3rd Floor, RMZ Infinity
Municipal No. 3, Old Madras Road
Survey No 1477/2 & 10
Benniganahalli, K.R. Puram
560016 Bengaluru
Ernst & Young
UB City, Canberra Block
12th & 13th Floor
No. 24, Vittal Mallya Road
Bengaluru
Bengaluru
560001
560001
Share an Interview