{"id":1472134,"url":"https://alion.io/job/ernst-young-infosec-security-consultant","title":"InfoSec Security Consultant","company":{"id":2859,"name":"EY","domain":"ey.com","url":"https://alion.io/company/ey-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Katowice, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":55000,"max_usd":100000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":29},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"Azure","optional":false},{"name":"ISO 27001","optional":false},{"name":"ITIL","optional":false},{"name":"PCI DSS","optional":false}],"status":"live","first_seen_at":"2026-09-29T16:43:09Z","employer_posted_date":"2026-09-29","last_verified_at":"2026-10-14T19:11:45Z","board_verified":true,"closed_at":null,"days_open":15,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":15},"description":"InfoSec Security Consultant\nLocation: Wrocław / Katowice - 2 days in office / 3 days remote\nLet us introduce you the job offer by EY GDS Poland - a member of the global integrated service delivery center network by EY.\nAs a Security Consultant within EY’s internal Security Consulting and Assurance team, the individual will be a trusted advisor to EY’s Audit Technologies portfolio. Overarching responsibilities will include: direct engagement in delivery on programs and projects, defining security architectures, providing security guidance, identifying and prioritizing security-related requirements, promoting secure-by-default designs and facilitating delivery of information security services throughout the system development life cycle (SDLC). The role will also direct technology teams in the implementation of appropriate risk treatment and mitigation options to address security vulnerabilities. Security Consultants are responsible for the translation of vulnerabilities into business risk terminology for communication to business stake holders.\nYour key responsibilities\nDefine security architectures and provide pragmatic security guidance that balance business benefit and risks.\nEngage technology teams in order to evaluate and prescribe security controls at all touchpoints throughout the technology architecture\nDefine security configuration standards for platforms and technologies\nProvide knowledge sharing and technical assistance to other team members\nAct as Subject Matter Expert (SME) in responsible technologies and have deep technical understanding of responsible portfolios\nPerform risk assessments of information systems and infrastructure\nMaintain and enhance the Information Security risk assessment methodology\nDevelop appropriate risk treatment and mitigation options to address security risks identified during security review or audit\nTranslate technical vulnerabilities into business risk terminology for business units and recommend corrective actions to customers and project stake-holders\nSkills and attributes for success\nCloud technologies (MS Azure specifically)\nStrategic skills to analyze technology architectures and software solutions, identify security risk and prescribe mitigating security measures in accordance with the firm’s risk tolerance level.\nFive or more years working experience with the architecture, design and engineering of web based multi-tier information systems or network infrastructures\nExperience with security architecture, design and assessment of accounting and auditing systems.\nAbility to appropriately balance firm security needs with business impact & benefit\nAbility to facilitate compromise to incrementally advance security strategy and objectives\nAn overall understanding of the business objectives of EY with an ability to build relationships with business partners and across EY IT\nAbility to team well with others to facilitate and enhance the understanding & compliance to security policies • Experience facilitating meetings with multiple customers and technical staff, including building consensus and mediating compromise\nHigh degree of tolerance for ambiguity\nExperience conducting risk assessments, vulnerability assessments, vendor and third party risk assessments and recommending risk remediation strategies\nExperience working with common information security standards, such as: ISO 27001/27002, NIST, PCI DSS, ITIL, COBIT\nTo qualify for the role, you must have\nEducation:\nAn advanced degree in Computer Science or a related discipline, or equivalent work experience Required\nExperience:\nFive or more years of experience in security architecture, application security, networking, data center configuration, cloud technology, and the management of a significant Information Security risk functions\n5 or more years of experience in an Information Security or Information Technology discipline\nExperience in the Agile development lifecycle\nExperience in managing the communication of security findings and recommendations to IT project teams and management • Exceptional judgment, tact, and decision-making ability\nFlexibility to adjust to multiple demands, shifting priorities, ambiguity, and rapid change\nOutstanding management, interpersonal, communication, organizational, and decision-making skills\nStrong English language skills are required\nIdeally, you’ll also have\nExperience with cloud technology solutions, particularly MS Cloud\nExperience in technologies such as block chain, RPA, AI, etc.\nKnowledge of the Scaled Agile Framework\nCertification requirements:\nIt is preferred that candidates hold or be actively pursuing related professional certifications within the GIAC family of certifications or CISSP, CISM or CISA\nWhat we offer\nEY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across nine locations - Argentina, Hungary, India, the Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom - and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. We’ll introduce you to an ever-expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.\nContinuous learning: You’ll develop the mindset and skills to navigate whatever comes next.\nSuccess as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.\nTransformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.\nDiverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.\nAbout EY\nEY | Building a better working world\nEY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.\nEnabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.\nWorking across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.\nIf you can demonstrate that you meet the criteria above, please contact us as soon as possible.\nThe exceptional EY experience. It’s yours to build.\nIn compliance with the requirements of the Whistleblower Protection Act, our company has established the Procedure for reporting breaches of law and undertaking appropriate follow-up actions. Any misconduct should be reported through the EY Ethics Hotline.","description_format":"text","description_chars":6857,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Continuous learning"],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Financial Advisory, Valuation & Restructuring","Management Consulting","Tax Advisory & Preparation"],"lifecycle":[{"event":"open","at":"2026-09-29T16:43:09Z"}],"visa":[],"liveness":{"score":59,"band":"ok","label":"Likely open","p_open":1,"p_active":0.79,"p_room":0.75,"age_days":15,"expected_fill_days":22,"reasons":["conf:10","velocity","win:late","comp:brand"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/ernst-young-infosec-security-consultant","json_url":"https://alion.io/job/ernst-young-infosec-security-consultant.json","meta":{"generated_at":"2026-10-15T08:24:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12671,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2859},"rest":"https://alion.io/mcp/rest/get_company?id=2859"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fernst-young-infosec-security-consultant"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fernst-young-infosec-security-consultant"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fernst-young-infosec-security-consultant"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ernst-young-infosec-security-consultant\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fernst-young-infosec-security-consultant"}]}