Security Compliance Assistant Director. Alpharetta Move Collective

At EY, we’re committed to shaping your future with confidence.

Join us on a journey where you’ll have the opportunity to thrive in a globally connected powerhouse of diverse teams. At EY, we focus on high ethical standards and integrity, and we expect all candidates to reflect these values.

As data continues to drive businesses, protecting information and systems is paramount. Our Information Security team plays a critical role in safeguarding client and EY assets. Be part of a global team who proactively secures EY’s digital services, enabling the delivery of high-quality, secure products and services while swiftly responding to any security events.

As an Assistant Director in the Information Security Portfolio Compliance Enablement function, you will collaborate with service line and function technologists worldwide. Your focus will be on ensuring compliance with Information Security policies while assisting business teams in enhancing their risk postures. You’ll partner with leaders to uphold compliance across global and regional assets, maintaining security and technology compliance through robust governance.

• Manage and mitigate security risks within the Portfolio or Service Line while engaging stakeholders for insights on key risks affecting security posture.

• Identify and report on security risk trends, promoting a comprehensive remediation approach.

• Proactively discover and address security vulnerabilities in systems and processes before exploitation can occur, enhancing compliance through continuous improvement.

• Assist in managing the workflow of security compliance findings in our Governance, Risk, and Compliance (GRC) tool to maintain adherence to security policies and regulations.

Your key responsibilities will include:

• Leading projects that enhance EY’s overall risk posture.

• Developing and implementing effective compliance strategies and remediation plans.

• Collaborating with stakeholders to reinforce security policies and compliance responsibilities.

• Contributing to ongoing security initiatives and improving security practices.

• Translating technical vulnerabilities into business risk terms for better understanding.

• Enhancing compliance assessment toolkits and conducting evaluations for technology infrastructure, applications, and third-party dependencies.

• Driving continuous improvement through project management, automation, and innovative security practices.

• Proven compliance management experience within Information Security.

• Ability to balance security requirements with business operational needs.

• Strong leadership and organizational capabilities.

• Strong relationship-building skills to facilitate adherence to security policies.

• Experience conducting risk assessments and recommending actionable remediation strategies.

• Ability to develop and oversee enforcement protocols effectively.

• Proficient in communicating complex security issues and negotiating viable solutions.

• Knowledgeable about technical infrastructures and applications.

• Ability to collaborate well with teams to enhance understanding and compliance with security policies.

• Experience in managing metrics to evaluate policy enforcement effectiveness.

• High level of integrity and trustworthiness, representing the company with professionalism.

• At least 8 years of experience in Cyber Security or a related field.

• At least 3 years in a leadership position managing a team.

• A degree in Cybersecurity, Information Security, Computer Science, or a related discipline; or equivalent work experience.

• Certifications like CRISC, CISSP, CISM, CISA, CIA, or GIAC relevant to the role.

• Familiarity with security standards such as ISO 27001/27002, NIST, PCI DSS, ITIL, and COBIT.

• Understanding of GRC frameworks and regulatory requirements including PCI, SOX, HIPAA, GDPR, and GLBA.

• Demonstrable capability to identify and mitigate security risks proactively.

• Able to work effectively with diverse teams to foster a collaborative security culture.

• Experience in managing communications related to IT project teams.

• Strong English communication skills, capable of engaging with…