Iam Compliance Senior Associate

Iam Compliance Senior Associate - EY Global EY Key Responsibilities Recognizes and applies the prescribed methodologies to monitor appropriate security controls that may result from the separation/transfer of users, anomalies in data variables, as well as a general validation of EYT department activities that can result in security issues. Utilizes EY’s Global Information Security Policy: Code of Connection to identify adherence to the Firm’s current policies/standards. Utilizes industry frameworks such as the International Organization for Standardization (ISO 27001) to examine compliance requests referred to IAM Monitoring by EYT’s teams to identify opportunities for operational efficiencies and risk mitigation. Performs audits and other due diligence activities to gather necessary information, document policy exceptions or request for same from the affected business groups and to provide details for review and approval by the Information Security Team. Provides appropriate response to internal requests identified via EYT staff as well as requests escalated from the Global Service Desk in ServiceNow on such matters as policy exceptions to the firm’s compliance mandates. Performs various departmental security audits to ascertain appropriate steps to return to compliance or reduce non-compliance with the firm’s standard for security compliance. Performs monitoring activities, such as the identification of separated or transferred users, to validate that system access privileges were removed on a timely basis in compliance to firm policies. Consults with stakeholders to identify opportunities to streamline processes and/or procedures to strengthen security control measures and reduce non-compliance security debt. Identifies, analyzes and escalates noted patterns associated with EY security mandates to recognize trends and identify training/improvement opportunities utilizing reports and metrics. Assists, as part of a team of skilled technicians, in technical support tasks at a level 2 of remediation and other activities for compliance security improvements in response to specific EY identified mandates or to align the compliance security to industry standards and best practices. Guides more junior members of staff on best practices to perform tasks or activities that require such specific guidance to guide their success. Knowledge, skills, and experience requirements Advanced analytical abilities to effectively conduct issue analysis so that key issues are properly identified, and effective solutions are provided. Make sound decisions to address isolated audit exceptions or in guiding broader global audit exception issues that may affect portions of or entire business units. Drive the priority and time management of their own efforts to support/resolve assigned activities and communicate results and findings to end users and management as necessary. Manage and deliver on multiple and shifting priorities to provide audit results and identify and prescribe solutions that are timely, accurate and effective in supporting the business. Advanced interpersonal skills to engage in or lead cross business/team discussions within a matrixed, geographically dispersed organization and to formulate credible ideas or insightfully challenge proposed options or traditional solutions. Advanced communication skills, both oral and written in the English language, to summarize key issues and findings, to formulate supportive ideas and materials as well as present complex findings and ideas clearly and concisely to a variety of levels of the organization including senior management. Advanced knowledge of International Organization for Standardization directives to identify industry standards and procedures that includes all legal, physical, and technical controls involved in an organization’s information risk management processes. Advanced knowledge and use of the Information Technology Infrastructure Library (ITIL) processes with an eye to progressive levels of certification as required. Experience Approximately 3-5 years of experience in Identity and Access Management. Experience advising and communication with clients and vendors in relation to security policies. Demonstrated sound judgment, tact, and decision‑making ability. Demonstrates integrity and providing high quality deliverables to meet deadline, with a priority on providing excellent customer service and managing customer expectations. Good management, interpersonal, communication, organizational, and decision‑making skills. Ability to understand and integrate cultural differences and motives to lead cross cultural teams. Strong English language skills, written and verbal, are required. Education A degree in Computer Science or a related discipline, or equivalent work experience. Certification Requirements Certification of Chief Information Security Officer (CCISO). Certified Information System… #J-18808-Ljbffr