EY Senior Cybersecurity Risk Consultant 

Poland, Silesian Voivodeship 

471084804

Senior Cybersecurity Risk Consultant

As a Senior Consultant within our Cybersecurity, Risk, Compliance & Resilience (CRCR) competency, you will help EY Clients evaluate the effectiveness and maturity of their cybersecurity and resiliency programs in alignment with regulatory expectations, strategic priorities, and operational demands. In addition to governance, compliance, and control evaluations, you will lead the implementation of risk management strategies and threat modelling activities, ensuring that the organization maintains acceptable risk levels while enabling digital transformation. You will support the delivery of IT Security Plans and contribute to complex risk analysis and mitigation initiatives across hybrid IT environments.

Skills and attributes for success

Minimum 5 years of experience in cybersecurity risk management, with proven expertise in executing complex risk assessments, threat modelling, and strategic mitigation planning including, but not limited to below areas:

• Assuring the conformity to regulations, norms and standards such as ISO27001, NIST or any other ISMS governance systems;
• Implementation of the risk treatment plans;
• Running business continuity program assessments;
• Practical knowledge with Third Party Risk Management (TPRM).

• Deep understanding of cybersecurity risk trends, control frameworks, and legal/regulatory drivers.
• Exceptional stakeholder management and leadership skills, including guiding junior risk analysts and engaging with senior client stakeholders.
• Strong ability to evaluate emerging cybersecurity risks and recommend effective control solutions.
• Demonstrate excellent interpersonal skills, inspire teamwork and responsibility with engagement team members.

To qualify for the role, you must have

• Excellent command of the English language, other European language would be an asset.
• Analytical and problem-solving ability, ability to work effectively as a team member or as individual contributor, observant with an eye for detail.
• Ability to critically develop and review information Security SOPs to tackle/identify controls gaps and weaknesses.
• Ability to liaise with stakeholders and strong project management skills.
• Effectively communicate complex cybersecurity risks and technical information to management, enabling informed decision-making and strategic guidance.

Ideally, you’ll also have

• One or more certificate from the following: CISSP, CISM, CRISC, CGRC, ISO/IEC 27001 Lead Implementer, ISO/IEC 27005 Risk Manager, or any other recognized and equivalent certification in risk management, and cybersecurity.
• Experience working with IT Security and Risk Management (ITSRM) programs or functions.
• Knowledge about Digital Operational Resilience Act (DORA) and/or NIS2 directive requirements.

What we offer

EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across ten locations – Argentina, China, Hungary, India, the Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom – and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. We’ll introduce you to an ever-expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.

• Continuous learning : You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you : We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership : We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

In compliance with the requirements of the Whistleblower Protection Act, our company has established the Procedure for reporting breaches of law and undertaking appropriate follow-up actions. Any misconduct should be reported through the EY Ethics Hotline.