E

Ernst & Young

Global professional services: audit, tax, consulting

EYP-IDD-Assistant Manager

Security Governance, Risk & ComplianceUpdated on Nov 14
Full-timeBengaluru, Karnataka, IndiaNo salary listed

About the Job

Requirements

  • Experience delivering cybersecurity engagements across Cyber Due Diligence, post-deal integration or separation, cybersecurity maturity assessment, privacy assessment or cyber transformation.
  • Ability to manage defined workstreams involving client stakeholders and multidisciplinary transaction and advisory teams.
  • Strong understanding of security architecture and design principles, including Zero Trust, defence in depth and secure-by-design concepts.
  • Ability to facilitate stakeholder discussions, gather and challenge information, present findings, and support decision-making under senior engagement oversight.
  • Strong analytical and commercial judgement, with the ability to connect technical findings to business risk, deal value and implementation priorities.
  • Clear written and verbal communication skills, with experience producing concise, executive-ready deliverables in PowerPoint, Word and Excel.
  • An innovative and collaborative mindset, with the ability to develop practical solutions tailored to client and transaction needs.
  • Ability to coach junior team members and contribute to recruitment, training and wider practice-development activities.
  • Flexibility to support broader IT, cybersecurity and operational transaction work and to travel internationally when required.
  • Four to six years of information and cybersecurity experience, including exposure to M&A, cyber or privacy assessments, security architecture, security operations or related consulting.
  • A B.E., B.Tech. or equivalent degree in Computer Science or Information Technology from a reputed institution.
  • A leading cybersecurity qualification, such as CISSP, CISA, CCSP, CISM or ISO 27001 ISMS.
  • Knowledge of cybersecurity and privacy requirements, including GDPR, NIS2, CCPA and other relevant regulations and frameworks.
  • Experience with recognised cybersecurity frameworks, such as NIST CSF, ISO 27001, CIS Controls and PCI DSS.
  • Strong understanding of network and cloud security, identity and access management and privileged access management, and security operations—including SIEM, threat monitoring, incident response and vulnerability management.

Responsibilities

  • Support global EY practice teams in planning, managing and delivering cybersecurity and privacy engagements across the M&A transaction lifecycle.
  • Conduct buy-side, sell-side and red-flag Cyber Due Diligence to identify material risks, assess transaction implications and develop practical recommendations and remediation cost considerations.
  • Support cyber workstreams for post-deal integration, carve-out and separation programmes, including Day 1 readiness, 100-day planning, transition-state requirements, TSA dependencies and execution tracking.
  • Perform cybersecurity maturity assessments using recognised standards and frameworks; assess current and target states, identify gaps, benchmark capabilities and develop prioritised improvement roadmaps.
  • Conduct privacy and data protection assessments against GDPR and other applicable regulations and leading frameworks, covering privacy governance, data lifecycle, third-party processing, cross-border transfers, data subject rights and breach management.
  • Assess cybersecurity capabilities and controls across network security, identity and access management, privileged access management, security operations, vulnerability management, incident response, cloud security, endpoint security and data protection.
  • Evaluate transaction-related dependencies and risks involving shared infrastructure, applications, identities, security tooling, data, third parties and transitional service arrangements.
  • Support the design of target-state security architecture, operating models, governance structures, policies, processes and implementation roadmaps.
  • Conduct proportionate outside-in research, including open-source intelligence and dark web analysis, where relevant to the engagement scope.
  • Translate complex cybersecurity and privacy observations into clear business risks, transaction implications and actionable recommendations for client stakeholders.
  • Prepare high-quality deliverables, including diligence and assessment reports, gap analyses, risk registers, integration and separation plans, workstream trackers, executive presentations and implementation roadmaps.
  • Manage assigned work packages, coordinate with client and EY stakeholders, monitor timelines and quality, and provide day-to-day guidance to junior team members.
  • Build strong relationships with regional EY-Parthenon practice teams and contribute to proposals, client presentations, methodologies, knowledge assets and other practice-development initiatives.

Desired Qualifications

  • An MBA or PGDM from a Tier 1 or Tier 2 institution.
  • Knowledge of operational technology security.
  • Project management skills.
  • Strong communication and presentation skills with proven experience producing high-quality reports, papers, presentations and thought leadership.
  • Programme and project management expertise with demonstrable experience managing and being responsible for the delivery of successful cyber programmes.

About the Company

Ernst & Young

Global professional services: audit, tax, consulting

EY provides professional services across Assurance, Tax, Consulting, and Strategy & Transactions through member firms coordinated by EY Global. It serves clients in about 150 countries with cross-disciplinary teams delivering audits, tax planning, technology, risk management, and M&A and strategy advisory. Its global, integrated platform and large network differentiate it by offering coordinated services across disciplines. The goal is to help clients meet regulatory requirements, improve governance and performance, and create value.

Company size
1,001-5,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Boston, MA
Founded
1991

Recently Posted Jobs

Explore more opportunities at Ernst & Young

See more jobs