At EY, you'll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we're counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Supplier Risk Assurance Analyst - Senior Associate

EY Technology:

Global Information Security (Info Sec) - Our mission is to protect and enable the Firm to confidently utilize technology enabled products and services to help the Firm to build a better working world for our clients and Firm. We use leading practices, latest generation technology, and hire most qualified people to detect, respond, and mitigate cyber risk and to enable the Firm to move at the speed of business.

The opportunity

The Supplier Risk Assurance program evaluates and monitors information security risk associated with the Firm's use of third party technology suppliers. We measure risk against Firm security controls, industry standards, regulations and laws, and EY business practices. We then advise our engagement and project managers, our procurement team, and our Legal teams in the recommended treatment of the risk assessment conclusions.

In a working world where there is an increasing reliance on third party provided products and services the role offers interaction with some of the most interesting and important technology related activities of the Firm across the spectrum of services offered.

This role is an important and very visible contributor offering highly valued and critical services within a highly collaborative team environment. A more exciting challenge is difficult to find!

Your key responsibilities

The person chosen will conduct inherent risk assessments, supplier research, reporting, data analytics, communications with our stakeholders, and other required tasks associated with the execution of the Supplier Risk Assurance mission.

Skills and attributes for success

• Well-developed and creative analytic abilities to synthesize technical data, project related information, interview and survey results, and other information to inform risk decisions.
• Ability to manage and deliver on multiple and shifting priorities to provide high quality, timely, and effective service to our customers.
• Advanced interpersonal skills to engage and collaborate with multiple internal and external stakeholders within a matrixed and global organization.
• Highly developed communications skills, both oral and written in the English language
• Must be able to rapidly learn a complex business process that involves acquisition of knowledge and familiarity with related regulations, EY Policies and Standards, and international standards such as ISO 27001:2013, SOC 2, HITRUST, and PCI-DSS.

To qualify for the role you must have:

• Bachelor level or higher degree in computer science or related discipline such as engineering or an equivalent in experience (minimum of 3 years in a related function)
• Two to three years of experience in any of the following: information security, IT risk management, internal audit, IT process and analytics, or compliance
• Experience working with Information Security controls such as ISO27001:2013, NIST, or SOC.

Ideally, you'll also have

• Certifications such as the Certified Information Systems Security Professional (CISSP), Global Security Essentials Certification (GSEC), or Certified in Risk and Information Systems Control (CRISC).
• Good working knowledge of data analytic methods and tools, including but not limited to Spotfire, and Microsoft Excel. Good knowledge and skills with Microsoft Office and Share point.
• Experience, skills, or education in Information Security technical areas.

What we look for

The ideal candidate will enjoy the challenge of rapid acquisition of knowledge and have the skills and determination to join a high performing team. We are looking for someone who is agile, flexible, serious about providing top flight service to our customers, and above all a great team member.

What working at EY offers

We offer a competitive remuneration package where you'll be rewarded for your individual and team performance. Our comprehensive Total Rewards package includes support for flexible working and career development, and with FlexEY you can select benefits that suit your needs, covering holidays, health and well-being, insurance, savings and a wide range of discounts, offers and promotions. Plus, we offer:

• Support, coaching and feedback from some of the most engaging colleagues around
• Opportunities to develop new skills and progress your career
• The freedom and flexibility to handle your role in a way that's right for you

EY is committed to being an inclusive employer and we are happy to consider flexible working arrangements. We strive to achieve the right balance for our people, enabling us to deliver excellent client service whilst allowing you to build your career without sacrificing your personal priorities. While our client-facing professionals can be required to travel regularly, and at times be based at client sites, our flexible working arrangements can help you to achieve a lifestyle balance.

Business Case

The Supplier Risk Assurance team currently handles approximately 1,000 transactions per month with volume increasing and a new monitoring program to staff. Our goal is to significantly improve our ability to move with the speed of business by leveraging GDS staff to process lower risk transactions and to concentrate our more senior resources on high risk transactions and conducting monitoring and evidence gathering. Most of our staff are in locations in Poland and India, while most of our transactions are in the Americas. This position is critical for two reasons; 1) to help fill the need to deal with Americas based transaction in a time zone friendly manner and 2) to assist in data analytics and reporting development.

Impact of not Hiring

We will lack the ability to leverage junior resources to provide more time zone friendly services to our customers. This would in turn hamstring our efforts to significantly improve quality and speed to completion of transactions. We would also continue to lack the number of resources to adequately staff for our volume and our monitoring program.

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.