InfoSec Governance

EY is seeking an experienced Stay-In-Compliance Consultant to oversee vulnerability management within Enterprise Technology, coordinating with Infosec and product teams to drive remediation and governance across IT functions.The role emphasizes risk assessment, policy oversight, and reporting with a focus on compliance against established frameworks,...

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for...

The Role DevSecOps Pipeline Design & Implementation Design, build and maintain secure CI/CD pipelines integrating SAST, DAST, SCA, secrets detection, container scanning and SBOM generation as automated, non-blocking gates that shift security feedback to the point of code commit. Implement and tune security tooling (GitHub Advanced Security, Checkmarx,...

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for...

Key ResponsibilitiesDevSecOps & CI/CD SecurityDesign, build, and maintain secure CI/CD pipelines with integrated SAST, DAST, SCA, secrets detection, container scanning, and SBOM generation.Implement and tune security tools such as GitHub Advanced Security, Checkmarx, Snyk, Trivy, OWASP ZAP, IriusRisk, or equivalent solutions.Establish security gates,...

The Application Security Engineer is a hands-on technical role responsible for embedding security engineering practices throughout the Software Development Life Cycle (SDLC). The role focuses on DevSecOps, security automation, code scanning, security testing, and cloud security, translating security assessments and architectural recommendations into...

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. ...

Tech. Stack portfolio project manager is responsible to manage the end-to-end co-ordination and timely renewals of licenses across the portfolio. The duties include the following: Holding accountability for timely renewal of SW licenses, with 9-month window ahead of contract endProactively anticipating issues, being resourceful in handling removal of...

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. ...