At EY, you'll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture, and technology to become the best version of you. We value your unique voice and perspective to help EY become even better. Join us and build an exceptional experience for yourself and a better working world for all.

Position: Supplier Risk Assurance Analyst - Associate

EY Technology: Global Information Security (Info Sec) - Our mission is to protect and enable the Firm to confidently utilize technology-enabled products and services to help the Firm build a better working world for our clients and the Firm. We use leading practices, the latest generation technology, and hire the most qualified people to detect, respond to, and mitigate cyber risk, enabling the Firm to move at the speed of business.

The opportunity:

The Supplier Risk Assurance program evaluates and monitors information security risk associated with the Firm's use of third-party technology suppliers. We measure risk against Firm security controls, industry standards, regulations, laws, and EY business practices. We then advise our engagement and project managers, procurement team, and Legal teams on the recommended treatment of the risk assessment conclusions. In a business world increasingly reliant on third-party products and services, this role offers interaction with some of the firm's most interesting and important technology-related activities across our service spectrum. This role is an important and visible contributor offering highly valued and critical services within a collaborative team environment.

Your key responsibilities:

- Conduct inherent risk assessments, vendor research, reporting, data analytics

- Communicate with stakeholders and other required tasks associated with the execution of the Supplier Risk Assurance mission.

Skills and attributes for success:

- Advanced and creative analytic abilities to synthesize technical data, project-related information, interview and survey results, and other information to inform risk decisions.

- Ability to manage and deliver on multiple and shifting priorities to provide high-quality, timely, and effective service to our customers.

- Advanced interpersonal skills to engage and collaborate with multiple internal and external stakeholders within a matrixed and global organization.

- Highly developed communications skills, both oral and written in the English language.

- Rapid learning capability regarding complex business processes that involve acquisition of knowledge and familiarity with related regulations, EY Policies and Standards, and international standards such as ISO 27001:2013.

To qualify for the role you must have:

- Bachelor level or higher degree in computer science or related discipline such as engineering or an equivalent in experience.

- Experience in any of the following: information security, IT risk management, internal audit, or compliance.

- Awareness of Information Security controls such as ISO27001:2013, NIST, or SOC.

Ideally, you'll also have:

- Good working knowledge of data analytic methods and tools, including but not limited to Spotfire and Microsoft Excel.

- Good knowledge and skills with Microsoft Office and SharePoint.

- Experience, skills, or education in Information Security technical areas.

What we look for:

The ideal candidate will enjoy the challenge of rapid acquisition of knowledge and have the skills and determination to join a high-performing team. We are looking for someone who is agile, flexible, serious about providing top-flight service to our customers, and above all, a great team member.

What working at EY offers:

We offer a competitive remuneration package where you'll be rewarded for your individual and team performance. Our comprehensive Total Rewards package includes support for flexible working and career development. With FlexEY, you can select benefits that suit your needs, covering holidays, health and well-being, insurance, savings, and a wide range of discounts and promotions. Plus, we offer:

- Support, coaching, and feedback from some of the most engaging colleagues around.

- Opportunities to develop new skills and progress your career.

- The freedom and flexibility to handle your role in a way that's right for you.

EY | Building a better working world:

EY exists to build a better working world, helping to create long-term value for clients, people, and society, and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform, and operate. Working across assurance, consulting, law, strategy, tax, and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.