Home
Communities
Companies
- Companies
  
  Discover best places to work
- Compare Companies
  
  Compare & find best workplace
- Add Office Photos
  
  Bring your workplace to life
- Add Company Benefits
  
  Highlight your company's perks
Reviews
- Company reviews
  
  Read reviews for 6L+ companies
- Write a review
  
  Rate your former or current company
Salaries
- Browse salaries
  
  Discover salaries for 6L+ companies
- Salary calculator
  
  Calculate your take home salary
- Are you paid fairly?
  
  Check your market value
- Share your salary
  
  Help other jobseekers
- Gratuity calculator
  
  Check your gratuity amount
- HRA calculator
  
  Check how much of your HRA is tax-free
- Salary hike calculator
  
  Check your salary hike
Interviews
- Company interviews
  
  Read interviews for 40K+ companies
- Campus placements
  
  Interviews questions for 2K+ colleges
- Share interview questions
  
  Contribute your interview questions
Jobs
Awards

WINNERS AWAITED!
- ABECA 2025
  
  WINNERS AWAITED!
  
  AmbitionBox Employee Choice Awards - 4th Edition
- ABECA 2024
  
  AmbitionBox Employee Choice Awards - 3rd Edition
- AmbitionBox Best Places to Work 2022
  
  2nd Edition
- AmbitionBox Best Places to Work 2021
  
  1st Edition

Add office photos

Engaged Employer

Ernst & Young

Compare

3.4

based on 10.4k Reviews

1 Ernst & Young Security Manager Job

EY-Digital Risk-Information Security Management-Senior

Ernst Young

3.4

based on 10.4k Reviews

4-10 years

Thiruvananthapuram

1 vacancy

EY-Digital Risk-Information Security Management-Senior

Ernst & Young

posted 12hr ago

Job Role Insights

Flexible timing

Key skills for the job

Quality Assurance Consulting Risk Management Information Security IT Audit Cisa

+ 3 more

Job Description

We re looking for Senior Consultant with expertise in Information Security Management System (ISMS) framework and IT Security implementation to join our international network of professionals helping our clients transform risk functions and implement solutions in building resilience. This is a unique opportunity for you to bring both functional and technical knowledge, including gaining experience pursuing and leading a wide array of projects. In addition, you will have the ability to develop and foster client relationships at senior levels of an organization, critical to our account centric approach and your personal growth. This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the growth of a new service offering.

Your key responsibilities

Delivery of project with focus on quality and timeline. Also considering necessary actions to address client expectations
Perform detailed information security, cybersecurity and IT security risk assessments
Provide guidance on information security and risk management concepts, cyber governance and cloud security. (ISO 27001, ISO 31000, SANS, CSC NIST etc.)
Do end to end implementation of ISMS frameworks for large enterprises in alignment with ISO and global standards.
Developing policies, procedures and guidelines related to security and business continuity.
Work on Security Governance, Operations and Audit, Information Security Controls, IT General Controls, Security Exception and Deviation, Vendor Security Management, QA/Compliance and Computer Systems Validation.
Perform IT internal control testing, develop IT internal audit plans, conduct IT audit closure meetings and provide other IT internal audit services for the MENA stakeholders.
Assess the client s current state IT internal controls for the clients IT environment and identify IT risks and subsequent recommendations.
Conduct internal audit, reviews, current state assessments and benchmarking on information security, cybersecurity and IT security
Working with client personnel to analyse, evaluate and enhance information systems supporting the business processes, and assisting clients and other technology professionals in performing information technology control audits and information technology control implementation engagements

Skills and attributes for success

Good understanding of ISO 27001
Demonstrated ability to handle multiple tasks with shifting deadlines and priorities under limited supervision
Demonstrated ability to interact effectively, internally and externally with all levels across the company including executive management.
Knowledge of Network Operations Center (NOC)/Security Operations Center (SOC) operations, Cisco VPN/Security Management System IDS, VPN, Firewalls, Vulnerability assessment, Proxy, Mail Gateway, IPS, SIEM
Understanding of cloud security standards (CSA), BYOD concepts, Technical security solutions, developing security dashboards etc
Ability to drive effective discussion with senior management.
Ability to conduct training for audience ranging from end user to top management
Deliver project and ensure quality of deliverables
Experience of working in any large IT/ITES or Financial or insurance industry would be advantage
Knowledge of IT DR, security solutions would be an added advantage
Understanding and knowledge of latest cyber developments

To qualify for the role, you must have

A bachelors or masters degree
A minimum of 4-10 years of experience in Information Security/Cybersecurity consulting.
Excellent communication skills with preferred team management role
A valid passport for travel.

Ideally, you ll also have

MBA/ B Tech /B Sc (any stream)
CISSP, CISA, CRISK, ISO 27001 LI/LA, CCSP, SANS/GIAC
Privacy certifications (if any)

Employment Type: Full Time, Permanent

Read full job description

Prepare for Security Manager roles with real interview advice

What Security Manager at Ernst & Young are saying

1.0

Rating based on 1 Security Manager review

Anonymous · IT & Information Security in Kochi

Likes

IF you are a good "A$$-licker" your job is safe, in fact they will create positions for you with made-up names.

Dislikes

in 2020 EY outsourced it's IT to IBM, exactly 1 year before that, the favorites of THE Big Boss transferred themselves (Not even an internal job was posted) to safer departments. These are the one's who never worked on a single issue, project or incident. Their only talent was spooning. When companies ask why they are loosing their reputation, it's NEPOTISM AND RACISM.