Senior Consultant - Cyber Risk Management
Job description
At EY, we’re all in to shape your future with confidence.
We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.
Join EY and help to build a better working world.
Confidence in your impact today. Freedom to build tomorrow.
At EY, you can be sure that you’re making a difference – for your client, for society, for your colleagues and for your own development. At the same time, you’ll have the freedom to work in a way that fits your life. Whether you choose to specialize, broaden your expertise or grow into leadership, you’re in the driver’s seat. Together with ambitious colleagues in an open and trusted culture, you aim for the best every day. Big on opportunity, friendly in collaboration. EY provides the resources you need to shape your career and make an impact in your field.
Your new job | About your main responsibilities
As Senior Consultant Cyber Risk Management, you’ll be part of the Cyber Security Team of Consulting. In this role, you’ll work for one or more of the following four areas of expertise:
- Cyber Transformation: to improve cybersecurity measurements and monitoring, and develop sustainable processes. You will gain experience applying risk management principles to a cybersecurity environment and leveraging cybersecurity frameworks / standards like ISO/IEC 27001:2013 / Baseline Informatiebeveiliging Overheid (BIO), NIST CSF, etc. You will design solutions to remediate gaps or enhance maturity of specific cybersecurity capabilities. And you will implement or improve cyber security management strategy and processes at the clients’ organization.
- Cyber Assessment: to assess cybersecurity programs and strategies, or specific technologies and/or information security processes using our proprietary framework or industry standards. Your focus will be on security and risk assessments of processes, applications, systems. You will assist our clients in understanding cyber threat landscape, assess the maturity of their cyber security strategy and/or assess compliance to regulations and standards.
- Data Protection & Privacy: to assess and consult clients on data privacy, implementation of data protection / GDPR programs to address confidentiality and security over customer, employee or patient data. You will gain insights into the design and operations of privacy programs and strategies in a variety of industries and learn how to design measurable programs to keep up with the ever changing regulatory landscape.
- Vulnerability Management: to build a full service vulnerability management offering providing clients with tailored solutions to deploy and run vulnerability management programs. You will manage vulnerabilities, associated risks and remediation within complex environments.
Your new team | About your colleagues and the office
With rapidly changing cybersecurity threats, clients from all industries look to us for trusted solutions for their increasingly complex risks. As a member of our Cyber Risk Management team you’ll have the opportunity help clients gain insights into their cybersecurity program and strategy as a whole. You will have access to our robust solutions to advise clients on managing cybersecurity risk, enhancing maturity, and improving efficiency. You will belong to an international connected team of specialists helping our clients with their most complex cybersecurity needs and contributing toward their business resilience. Within the Cybersecurity department, we focus on reliable solutions for increasingly complex cybersecurity risks in operational environments. We are an international team of specialists who help our clients with their most complex cybersecurity needs. We work from the Advanced Security Center in Amsterdam in collaboration with our Advanced Security Centers around the world to access the most advanced tools to combat cybercrime.
Your office
Amsterdam
Our Amsterdam office is located at the Zuidas: a bustling area full of companies. In our Cross Towers, we welcome up to 1,500 people every day. For a breathtaking view of the city, head to the 22nd floor. Collaboration takes on a new meaning in our Wavespace, a high-tech environment that connects clients and colleagues virtually across the globe.
Your skills and strengths | About your unique contribution
- Degree (Bachelor or Master) in Business Information Technology, in a technical field (e.g. Computer Science) with touch points to Cybersecurity topics or equivalent education
- 2 – 5 years of related work experience;
- A passion for consulting and cybersecurity topics
- Knowledge of one or more of the following areas: Cybersecurity assessments, IT and cybersecurity policies, standards, procedures and controls, Security strategies and roadmaps, Cybersecurity awareness and training, Cybersecurity metrics and reporting, Cybersecurity organization design and implementation.
- A strong background of the security frameworks and standards such as ISO 27001/2 and NIST CSF, and the cybersecurity laws and regulations such as GDPR
- A willingness to travel in The Netherlands to meet client needs and a valid driver’s license
- Excellent written and verbal communication skills in Dutch and English
- Strong client services orientation and accustomed to taking a proactive role in engagements
- Flexible, responsible and self-confident personality, who feels comfortable in client’s environment
Your benefits | About your perks and work enjoyment
- A competitive salary that reflects your role and responsibilities, depending on experience and qualifications. Plus, a solid pension plan for the future. In addition to your salary, you’ll receive holiday allowance and an annual bonus (based on performance and development).
- A laptop and phone for both work and personal use, and a monthly internet allowance.
- 29 vacation days to recharge and unwind, plus the option to buy extra days.
- With the mobility budget, you decide how you travel. Choose a lease car, a discounted public transport subscription, or arrange transport easily via our app.
- At EY, we care about a healthy work-life balance. Hybrid working makes this easier. Whether you're working from the office, at a client, or from home, we’ll make sure you have a well-equipped home office.
- The opportunity to work up to 20 days per year from abroad.
- The option to swap 3 national holidays for non-national ones.
- You’ll have the space to grow both personally and professionally. Whether you want to deepen your expertise, develop your personality, or improve your leadership style, we offer a broad range of trainings and courses.
- Your well-being is our priority. We believe that when you feel good, you perform better. That’s why you’ll have access to the OpenUp wellbeing platform (including for your family). You can easily connect with psychologists and lifestyle experts within 36 hours and take part in wellbeing sessions.
- A strong focus on teaming and various internal networks where you can join all kinds of social activities. A positive work atmosphere and good collaboration with colleagues contribute to your overall happiness at work.
All this within an environment where our core values of integrity, inclusiveness, and respect are central. We think it’s important that you can be yourself and fully develop into the best version of yourself. Curious about all our benefits? Click here.
Ready to shape your future with us? | About your application process
For this vacancy, we only ask for your CV. This way, it’s quick and easy to apply. After your application, our recruiter will call you within 5 days for a short introduction. We’ll explore whether the role could be a good match. Before the interview, we’ll ask you to complete an online assessment. Not a standard questionnaire, but a game-based assessment focusing on both your cognitive skills and behavioral preferences. We’ll discuss the results during the second interview, which will include a colleague from the relevant department. This mutual introduction is a chance for us to get to know you, and for you to ask any questions you have. In certain cases, a business case is part of the process. A final third interview might follow. If we’re a match, you’ll receive an offer and we’ll perform a pre-employment screening. Then your new adventure begins. Welcome to EY!
Research shows that women are less likely to apply if they don’t meet all the criteria. Please feel free to apply even if you don’t meet everything.
EY | Building a better working world
EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.
Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.
EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories