Ey Assurance

EY Assurance - Consultant Cybersecurity Strategy, Governance & Compliance - Roma/Milano/BariJoin to apply for the EY Assurance - Consultant Cybersecurity Strategy, Governance & Compliance - Roma/Milano/Bari role at EY .3 days ago – Be among the first 25 applicants.At EY, we shape your future with confidence.We help you grow in a global, connected world and bring your career to where you want it.Join EY and contribute to building a better workplace.What they say about usLearning & Development: over 50 hours of training per person per year.Career progression: in the last 12 months, 65% of EY employees received a career promotion.Salary & Benefits: extensive range of company benefits from gym and telecom services to free telemedicine and psychological support.Mobility & international opportunities, including the possibility to work from abroad up to 20 days without traveling.Hybrid work model without preset central days.Team OverviewThe Cybersecurity @Assurance team protects companies' digital value, drives security innovation and tackles digital transformation challenges.The multidisciplinary group works on high-profile projects nationally and internationally, combining technical, strategic and regulatory expertise to deliver tailored, effective, sustainable solutions.Due to significant project growth, our offices in Milano, Roma, Bari are looking for resources of varying seniority to join the Cybersecurity Strategy, Governance & Compliance team.These professionals will support clients in defining governance models, risk management strategies, and regulatory compliance (NIS2, DORA, ISO *****, etc.).Who we're looking forMaster's or bachelor's degree in Engineering, Computer Science, Economics, Cybersecurity or related discipline.2–4 years of professional experience in consulting or an enterprise setting, directly involved in projects on cybersecurity governance, risk management, IT compliance, digital transformation and business continuity.Experience in regulated contexts (Finance, Energy, Telco, Pharma) or with structured methodological approaches (ISO, NIST, COBIT).Knowledge of leading frameworks: ISO /IEC *******, NIST CSF, CIS Controls, COBIT, ITIL.Familiarity with sector regulations: GDPR, NIS2, DORA, PSD2, AGID directives, SOX and international data protection and security regulations.Experience defining and implementing cybersecurity governance models, policies, procedures, roles and responsibilities, and building security operating models.Skills in mapping and managing ICT/Cyber risks, conducting risk assessments and defining treatment plans.Experience in IT audit, ISO certification or support for external inspections or verifications.What EY offers youIn EY, you develop future skills and gain world-class experiences.You grow in a flexible environment, showcase your talent in an inclusive, diverse culture, and collaborate with connected global teams.Work on projects for clients across all sectors.Access to over 450,000 training hours to advance technical and personal talent.Supported by a personal Counselor throughout your career path.Flexible policy and possibility to work from abroad.Access to diverse benefits and welfare programs.EY promotes diversity, equity and inclusion, valuing uniqueness regardless of age, gender, ability, experience, culture, sexual orientation, religion, disability or socio-economic background.All job offers are equally accessible to people with disabilities, complying with Italian law L. *****.We aim to create an equitable and accessible workplace.If you have a disability, please let us know your needs during the selection process.EY CommitmentEY builds a better workplace, creating new value for clients and society while reinforcing market confidence.Leveraging data, AI and advanced technologies, EY teams help clients shape future confidence and address the most urgent challenges.Our services cover audit, consulting, tax, strategy and extraordinary operations.Powered by deep sector knowledge, a global multidisciplinary network and a diverse partner ecosystem, EY offers services in over 150 countries and regions.Seniority LevelMid-Senior levelEmployment TypeFull-timeJob FunctionInformation TechnologyIndustriesProfessional ServicesAdditional TitlesJunior Advisor – Cybersecurity – New GraduateInformation Cyber Security Associate ConsultantJunior Cyber Security Strategy ConsultantConsultant/Senior Consultant – Information Security & PrivacySenior Consultant – Cyber Security & ResilienceDigital Identity & Cyber Security ManagerCybersecurity Governance – GRC SpecialistSenior Consultant Cyber Security – Red Team – Roma/Milano/BariSenior Security Consultant – Identity Access Management#J-*****-Ljbffr