TECHNOLOGY CONSULTING- CYBERSECURITY GOVERNANCE, RISK, AND COMPLIANCE ASSISTANT MANAGER/ MANAGER

General Information
Location: Dublin
Available for Work Visa Sponsorship: NO
Business Area: Tech Consulting – Cyber Security
Contract Type: Full-Time – Permanent
EY’s Cyber Security practice is one of the fastest growing areas of the business with an immediate requirement for security architect. As part of our Cyber team you will be providing advisory and technical support to help our clients improve their cyber security posture to respond to the dynamic Cyber Security threats. You will provide security domain expertise and utilise your business insight to work closely with our clients to advise, design, build, deploy and test pragmatic security solutions that will give real and tangible benefits and security enhancement.

THE OPPORTUNITY

You will be a core member of a highly skilled and rapidly growing team of Technical Security specialists.
As a member of the team, you will have the opportunity to grow your career in leading the delivery of security architecture and design solutions with a significant opportunity for leadership experience and career progression.
We are looking for an experienced Cybersecurity Governance, Risk, and Compliance (GRC) Manager to lead our efforts in ensuring compliance with key cybersecurity regulations, including the Digital Operational Resilience Act (DORA), the NIS2 Directive, and the NIST Cybersecurity Framework (CSF) 2.0. The successful candidate will play a critical role in developing and implementing our cybersecurity governance framework, risk management strategies, and compliance programs to safeguard our information assets and ensure regulatory adherence.

Key Responsibilities:

• Governance:
• Develop and maintain a comprehensive cybersecurity governance framework aligned with DORA, NIS2, and NIST CSF 2.0.
• Establish and enforce cybersecurity policies, standards, and procedures that reflect regulatory requirements and best practices.
• Collaborate with senior leadership to integrate cybersecurity governance into overall business strategy and operations.
• Risk Management:
• Conduct risk assessments to identify, evaluate, and prioritize cybersecurity risks in accordance with DORA and NIS2 requirements.
• Develop and implement risk mitigation strategies and action plans to address identified vulnerabilities.
• Monitor and report on the effectiveness of risk management initiatives and controls.
• Compliance:
• Ensure compliance with DORA, NIS2, and NIST CSF 2.0, as well as other relevant regulations and standards.
• Stay informed about changes in cybersecurity regulations and assess their impact on the organization’s compliance posture.
• Coordinate and facilitate internal and external audits related to cybersecurity compliance.
• Training and Awareness:
• Design and deliver training programs to educate employees on cybersecurity regulations, policies, and best practices.
• Foster a culture of compliance and security awareness across the organization.
• Collaboration:
• Work closely with IT, legal, and other departments to ensure a unified approach to cybersecurity governance and compliance.
• Serve as the primary point of contact for all matters related to cybersecurity regulations and compliance.

Qualifications:
-

Bachelor’s degree in Cybersecurity, Information Technology, Business Administration, or a related field; Master’s degree preferred.

• years of experience in cybersecurity governance, risk management, and compliance, with a focus on DORA, NIS2, and NIST CSF 2.0.
• Strong understanding of cybersecurity regulations, frameworks, and best practices.
• Relevant certifications (e.g., CISSP, CISM, CRISC, CISA) are highly desirable.
• Excellent analytical, communication, and interpersonal skills.
• Proven ability to work collaboratively in a dynamic, team-oriented environment.

What working at EY offers
We offer a competitive remuneration package. Our comprehensive Total Rewards package includes support for flexible working and career development, and with FlexEY you can select benefits that suit your needs, covering holidays, health and well-being, insurance, savings and a wide range of discounts, offers and promotions. Plus, we offer:
-

Support and coaching from some of the most engaging colleagues around

• Opportunities to develop new skills and progress your career
• The freedom and flexibility to handle your role in a way that’s right for you

All our employees are given a benefits package which they can tailor to suit their individual preferences. Our range of benefits include:
-

Pension

• Maternity & Paternity leave
• Discounted health insurance
• Bike to work Scheme
• Web Doctor - Free unlimited online GP consultations for you and your family
• Recognition Awards
• The purchase of additional annual leave
• Cash incentives for referrals
• Hybrid Working
• Work Mobile
• Free Gym membership ·
• TECH MBA paid by EY
• Travel Pass
• Wellness rooms Available in some offices

EY is committed to being an inclusive employer and we are happy to consider flexible working arrangements. We strive to achieve the right balance for our people, enabling us to deliver excellent client service whilst allowing you to build your career without sacrificing your personal priorities. While our client-facing professionals can be required to travel regularly, and at times be based at client sites, our flexible working arrangements can help you to achieve a lifestyle balance.
Career Progression
-

When you join EY, you will be supported to ensure that you are enhancing your skills from day one.

• Continuous learning, where you can develop the mindset and skills to navigate whatever comes next.
• As you grow and develop here, you’ll discover opportunities to help customise your career journey, so that it’s as unique as you are - success is defined by you, we will provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership, we will give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture, you will be embraced for who you are and empowered to use your voice to help others find theirs.
• We have embraced Hybrid working at EY adding greater flexibility and autonomy to the roles of our employees.

About EY
As a global leader in assurance, tax, transaction and advisory services, we’re using the finance products, expertise and systems we’ve developed to build a better working world. That starts with a culture that believes in giving you the training, opportunities and creative freedom to make things better. Whenever you join, however long you stay, the exceptional EY experience lasts a lifetime.
Inclusion & Diversity
We hold a collective commitment to foster an environment where all differences are valued and respected, practices are equitable and everyone experiences a sense of belonging: Inclusion, diversity, and equity are part of who we are at EY. We believe that the highest-performing teams maximize the power of different perspectives and backgrounds. These teams are both diverse and inclusive and are willing to invite and learn from other perspectives. Our ability to include various viewpoints into our mindsets, behaviours and operations is fundamental to driving innovation, building strong relationships, and delivering the best solutions for our clients.
We recognise the strength that comes from having a diverse workforce and building a culture where we support all our people to achieve their potential. You’ll be embraced for who you are and empowered to use your voice to help others find theirs.
As an equal opportunities’ employer, we welcome applications from people of all backgrounds. Reasonable accommodations are offered at every stage of our recruitment process.
Join us in building a better working world. That’s Why, EY.
Apply now.
IMPORTANT: Where Agency assistance is required, our Talent Team will engage directly with suppliers. CVs / Profiles should not be shared directly with Hiring Managers. Unsolicited CVs / Profiles supplied to EY by Recruitment Agencies will not be accepted for this role.

• Governance:
• Develop and maintain a comprehensive cybersecurity governance framework aligned with DORA, NIS2, and NIST CSF 2.0.
• Establish and enforce cybersecurity policies, standards, and procedures that reflect regulatory requirements and best practices.
• Collaborate with senior leadership to integrate cybersecurity governance into overall business strategy and operations.
• Risk Management:
• Conduct risk assessments to identify, evaluate, and prioritize cybersecurity risks in accordance with DORA and NIS2 requirements.
• Develop and implement risk mitigation strategies and action plans to address identified vulnerabilities.
• Monitor and report on the effectiveness of risk management initiatives and controls.
• Compliance:
• Ensure compliance with DORA, NIS2, and NIST CSF 2.0, as well as other relevant regulations and standards.
• Stay informed about changes in cybersecurity regulations and assess their impact on the organization’s compliance posture.
• Coordinate and facilitate internal and external audits related to cybersecurity compliance.
• Training and Awareness:
• Design and deliver training programs to educate employees on cybersecurity regulations, policies, and best practices.
• Foster a culture of compliance and security awareness across the organization.
• Collaboration:
• Work closely with IT, legal, and other departments to ensure a unified approach to cybersecurity governance and compliance.
• Serve as the primary point of contact for all matters related to cybersecurity regulations and compliance