EY Assurance - Consultant Cybersecurity Strategy, Governance & Compliance - Roma​/Milano

EY Assurance - Consultant Cybersecurity Strategy, Governance & Compliance - Roma/Milano/Bari
Join to apply for the  EY Assurance - Consultant Cybersecurity Strategy, Governance & Compliance - Roma/Milano/Bari  role at  EY .

3 days ago – Be among the first 25 applicants.

At EY, we shape your future with confidence. We help you grow in a global, connected world and bring your career to where you want it. Join EY and contribute to building a better workplace.

What they say about us

Learning & Development: over 50 hours of training per person per year.

Career progression: in the last 12 months, 65% of EY employees received a career promotion.

Salary & Benefits:

extensive range of company benefits from gym and telecom services to free telemedicine and psychological support.

Mobility & international opportunities, including the possibility to work from abroad up to 20 days without traveling.

Hybrid work model without preset central days.

Team Overview
The  Cybersecurity @Assurance  team protects companies’ digital value, drives security innovation and tackles digital transformation challenges. The multidisciplinary group works on high‑profile projects nationally and internationally, combining technical, strategic and regulatory expertise to deliver tailored, effective, sustainable solutions.

Due to significant project growth, our offices in  Milano, Roma, Bari  are looking for resources of varying seniority to join the  Cybersecurity Strategy, Governance & Compliance  team. These professionals will support clients in defining governance models, risk management strategies, and regulatory compliance (NIS2, DORA, ISO 27001, etc.).

Who we’re looking for

Master’s or bachelor’s degree in Engineering, Computer Science, Economics, Cybersecurity or related discipline.

2–4 years of professional experience in consulting or an enterprise setting, directly involved in projects on cybersecurity governance, risk management, IT compliance, digital transformation and business continuity.

Experience in regulated contexts (Finance, Energy, Telco, Pharma) or with structured methodological approaches (ISO, NIST, COBIT).

Knowledge of leading frameworks: ISO /IEC 27001/2, NIST CSF, CIS Controls, COBIT, ITIL.

Familiarity with sector regulations: GDPR, NIS2, DORA, PSD2, AGID directives, SOX and international data protection and security regulations.

Experience defining and implementing cybersecurity governance models, policies, procedures, roles and responsibilities, and building security operating models.

Skills in mapping and managing ICT/Cyber risks, conducting risk assessments and defining treatment plans.

Experience in IT audit, ISO certification or support for external inspections or verifications.

What EY offers you
In EY, you develop future skills and gain world‑class experiences. You grow in a flexible environment, showcase your talent in an inclusive, diverse culture, and collaborate with connected global teams.

Work on projects for clients across all sectors.

Access to over 450,000 training hours to advance technical and personal talent.

Supported by a personal Counselor throughout your career path.

Flexible policy and possibility to work from abroad.

Access to diverse benefits and welfare programs.

EY promotes diversity, equity and inclusion, valuing uniqueness regardless of age, gender, ability, experience, culture, sexual orientation, religion, disability or socio‑economic background. All job offers are equally accessible to people with disabilities, complying with Italian law L. 68/99. We aim to create an equitable and accessible workplace. If you have a disability, please let us know your needs during the selection process.

EY Commitment
EY builds a better workplace, creating new value for clients and society while reinforcing market confidence. Leveraging data, AI and advanced technologies, EY teams help clients shape future confidence and address the most urgent challenges. Our services cover audit, consulting, tax, strategy and extraordinary operations. Powered by deep sector knowledge, a global multidisciplinary network and a diverse partner ecosystem, EY offers services in over 150 countries and regions.

Seniority Level
Mid‑Senior level

Employment Type

Full‑time

Job Function
Information Technology

Industries
Professional Services

Additional Titles

Junior Advisor – Cybersecurity – New Graduate

Information Cyber Security Associate Consultant

Junior Cyber Security Strategy Consultant

Consultant/Senior Consultant – Information Security & Privacy

Senior Consultant – Cyber Security & Resilience

Digital Identity & Cyber Security Manager

Cybersecurity Governance – GRC Specialist

Senior Consultant Cyber Security – Red Team – Roma/Milano/Bari

Senior Security Consultant – Identity Access Management

#J-18808-Ljbffr