E

Ernst & Young

Global professional services: consulting, assurance, tax

Senior Manager - ISO27001

Security Governance, Risk & ComplianceUpdated on Nov 14
Full-timeAmsterdam, Netherlands

About the Job

Requirements

  • Experience in business development, a go-to-market mindset, and the ability to build market strategies and generate a book of business.
  • Previous Big Four experience.
  • A disciplined and analytical approach to account management.
  • Ability to align strategy with market trends and client needs.
  • Experience generating a pipeline.
  • Eight or more years conducting ISO 27001 audits; experience within a certification body is a plus.
  • ISO 27001 lead auditor certification is a plus.
  • Ability to lead and manage a team of auditors and help them develop and enhance their skills.
  • Knowledge of IT auditing and advanced knowledge of IT general controls, including security, change management, disaster backup recovery, datacenter, and infrastructure; knowledge of IT governance processes such as ITIL is a plus.
  • Ability to critically review security policies and procedures, and design and implement security policies, procedures, standards, and controls in line with regulations or current standards including ISO 27001, NIST, and SANS.
  • Good understanding of cybersecurity industry standards including ISO, ITIL, NIST, and ISF, and privacy standards including GDPR and ISO 27018 is an advantage.
  • An entrepreneurial and problem-solving mindset, good project management, ability to collaborate with teams across multiple locations, and a strong command of English are required due to EY CertifyPoint's international clientele.

Responsibilities

  • Provide certification services and advice to national and international clients, including clients in the telecom, technology, and media sectors.
  • Guide teams through complex projects, combining subject matter expertise with leadership skills.
  • Contribute to the global development of services and market position through a go-to-market approach and business development.
  • Perform certification audits for security- and privacy-related controls for clients.
  • Provide workshops and training sessions on related topics.
  • Balance time among business development, travel, workshops, and support for client audits.
  • Work with the Technology Risk department to analyze IT systems, processes, and cybersecurity, making IT risks transparent and manageable.
  • Work closely with client financial auditors to support financial statement audits.

Desired Qualifications

  • Experience within a certification body.
  • ISO 27001 lead auditor certification.
  • Knowledge of IT governance processes such as ITIL.
  • Understanding of cybersecurity standards including ISO, ITIL, NIST, and ISF, and privacy standards including GDPR and ISO 27018.

About the Company

Ernst & Young

Global professional services: consulting, assurance, tax

EY (Ernst & Young) provides professional services at a global scale, offering consulting, assurance, tax, and transaction advisory services. It serves clients across industries such as technology, media, real estate, hospitality, and construction. Instead of selling a single product, EY works with clients through tailored engagements where cross-disciplinary teams analyze challenges, design strategies, perform audits, help with tax planning, and assist with mergers or divestitures. What sets EY apart is its worldwide reach and integrated service model, industry-specific expertise, and focus on responsible business practices like sustainability, cybersecurity, and workforce flexibility. EY’s goal is to help organizations improve performance, manage risk, and achieve sustainable growth while building a better working world.

Company size
5,001-10,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Boston, MA
Founded
1991

Recently Posted Jobs

Explore more opportunities at Ernst & Young

See more jobs