{"id":4163262,"url":"https://alion.io/job/ey-credential-protection-senior-security-analyst-1","title":"Credential Protection Senior Security Analyst 1","company":{"id":2859,"name":"EY","domain":"ey.com","url":"https://alion.io/company/ey-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure DevOps","optional":false},{"name":"IAM","optional":false},{"name":"ITIL","optional":false},{"name":"ITSM","optional":false},{"name":"Power BI","optional":false},{"name":"ServiceNow","optional":false},{"name":"Azure","optional":true}],"status":"live","first_seen_at":"2026-11-12T12:49:07Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-12T12:49:07Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.\nIAM Vulnerability Analyst\nToday’s world is fueled by vast amounts of information. Data is more valuable than ever before. Protecting data and information systems is central to doing business, and everyone in EY Information Security has a critical role to play. Join a global team of over 950 people who collaborate to support the business of EY by protecting EY and client information assets! Our Information Security professionals enable EY to work securely and deliver secure products and services, as well as detect and quickly respond to security events as they happen. Together, the efforts of our dedicated team helps protect the EY brand and build client trust.\nWithin Information Security we blend risk strategy, digital identity, cyber defense, application security and technology solutions as we consider the entire security lifecycle. You will join a team of hardworking, security-focused individuals dedicated to supporting, protecting and enabling the business through innovative, secure solutions that provide speed to market and business value.\nThe opportunity\nThe Identity and Access Management (IAM) organization, a part of Information Security which, enables over 400,000 individuals across 140+ countries to access systems and information securely. As part of the IAM organization, the IAM Vulnerability Manager within PSSI will be responsible for coordinating the end-to-end vulnerability management lifecycle for vulnerabilities reported against IAM services, platforms and assets.\nThe role partners closely with Global Vulnerability Management, Engineering, Operations, Architecture and Service Management teams to ensure vulnerabilities are reviewed, prioritized, assigned, tracked, reported and escalated through a consistent governance model.\nThis position will contribute towards the execution of the IAM vulnerability management strategy through intake coordination, prioritization, ownership validation, SLA oversight, reporting, dashboarding, escalation management and continual process improvement.\nWe offer opportunities to develop new skills and progress your career receiving support, coaching and feedback from colleagues around the world. This role will give you an opportunity to work with some of the best talent in the industry!\nThis role supports various functions, including vulnerability intake, triage, asset and owner mapping, remediation tracking, service reporting, Power BI dashboarding, escalation coordination and executive visibility across the IAM vulnerability portfolio.\nYour key responsibilities\nVulnerability Intake & Triage\nReceive and review vulnerability lists reported towards IAM services and assets.\nValidate vulnerability scope, affected assets, asset owners, severity and required remediation timelines.\nSort and prioritize vulnerabilities based on severity, risk exposure, impacted service, asset criticality and SLA requirements.\nMaintain an accurate vulnerability register covering ownership, status, due dates, remediation progress and risk indicators.\nEnsure vulnerability records are complete, current and aligned with organizational standards.\nAssignment & Governance\nAssign vulnerabilities to the appropriate technical groups, including Secure Access, IDM, Directory Enablement and other IAM teams as applicable.\nCoordinate with service owners and technical leads to confirm remediation ownership and delivery accountability.\nDefine and maintain governance routines for vulnerability review, follow-up, escalation and closure.\nFacilitate cross-functional discussions to resolve ownership gaps, prioritization conflicts and remediation blockers.\nEnsure the vulnerability management process remains effective, repeatable and fit for purpose.\nRemediation Tracking & SLA Oversight\nTrack remediation progress across assigned technical teams and monitor adherence to agreed SLAs.\nIdentify overdue vulnerabilities, recurring blockers, dependency risks and remediation delays requiring escalation.\nCoordinate with technical teams to obtain remediation updates, target dates, closure evidence and exception details.\nMonitor aging vulnerabilities and ensure appropriate management attention for high-risk or overdue items.\nSupport closure validation by ensuring remediation evidence and status updates are documented appropriately.\nReporting, Dashboards & Visibility\nPrepare regular operational and executive-level vulnerability reports covering status, trends, SLA performance, aging, ownership and risk exposure.\nDevelop and maintain Power BI dashboards to provide visibility into vulnerability remediation performance across IAM.\nMonitor vulnerability trends and identify recurring systemic issues that may require broader service improvement actions.\nProvide reporting to support audit, compliance, risk management and leadership reviews.\nTrack remediation actions through to completion and highlight deviations from agreed remediation plans.\nStakeholder Management & Escalation\nAct as the primary coordination point for IAM vulnerability management within PSSI.\nBuild strong relationships across Global Vulnerability Management, Engineering, Operations, Architecture, Service Management, Risk and Audit teams.\nEscalate overdue, blocked or high-risk vulnerabilities through defined management and governance channels.\nFacilitate communication between vulnerability reporting teams, technical remediation teams and leadership stakeholders.\nPromote awareness of vulnerability management expectations, ownership standards, SLA requirements and reporting processes.\nSkills and attributes for success\nGood understanding of vulnerability management, cyber risk management and enterprise remediation governance.\nExperience coordinating security remediation activities across multiple technical teams and service owners.\nAnalytical acumen and solution orientation to prioritize risk, identify blockers and recommend practical remediation governance actions.\nExperience developing management reporting, service metrics and process improvement actions.\nExperience building dashboards and reporting views using Power BI or similar reporting platforms.\nBuild and maintain strong relationships across all levels of a matrixed, geographically and culturally dispersed organization.\nEffective communication and analysis skills to break down complex issues, formulate solutions and influence partners at various levels of the organization, including senior management.\nPossess knowledge of IT Service Management (ITSM), including Incident, Problem, Change, SLA and escalation processes.\nGood understanding of project management principles and practices.\nExperience facilitating cross-functional governance reviews and remediation status meetings.\nTo qualify for the role you must have\nDegree in Computer Science, Information Security or related discipline, or equivalent work experience.\n5 - 8 years working within Information Technology, Information Security, Cybersecurity, IT Service Management or Vulnerability Management in a global firm.\nExperience coordinating enterprise vulnerability remediation activities across multiple teams.\nExperience with vulnerability reporting, remediation tracking, SLA monitoring and escalation management.\nExperience developing executive-level reporting, operational metrics and dashboards.\nKnowledge of ITSM processes and service governance practices.\nIdeally, you’ll also have\nUnderstanding of Identity and Access Management concepts and IAM service portfolios.\nExperience supporting cyber risk, infrastructure, platform or application security remediation processes.\nWorking knowledge of ServiceNow, Azure DevOps, Power BI and enterprise vulnerability management tools.\nITIL v3 or v4 Foundation Certification.\nUnderstanding of NIST Cybersecurity Framework, vulnerability remediation practices and risk-based prioritization principles.\nWorking knowledge of Six Sigma and Lean Principles.\nWhat we look for\nSeeking self-motivated, well-organized and detail-oriented individuals who are interested to engage and progress within a strong and dynamic team environment. Ability to work in a fast paced, rapidly changing environment with superb communication and collaboration skills would be ideal.\nA self-starter, independent-thinker, curious and structured person with ambition to improve vulnerability governance, increase transparency and help technical teams remediate risk effectively.\nWhat we offer\nAs part of this role, you will work in a highly coordinated, globally diverse team with the opportunity and tools to grow, develop and drive your career forward. Here, you can combine global opportunity with flexible working. The EY benefits package goes above and beyond too, focusing on your physical, emotional, financial and social well-being. Your recruiter can talk to you about the benefits available in your country. Here’s a snapshot of what we offer:\nContinuous learning: You will develop the mindset and skills to navigate whatever comes next.\nSuccess as defined by you: We will provide the tools and flexibility, so you can make a significant impact, your way.\nTransformative leadership: We will give you the insights, coaching and confidence to be the leader the world needs.\nDiverse and inclusive culture: You will be accepted for who you are and empowered to use your voice to help others find theirs.\nEY | Building a better working world\nEY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.\nEnabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.\nWorking across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.","description_format":"text","description_chars":10167,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Flexible schedule"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Financial Advisory, Valuation & Restructuring","Management Consulting","Tax Advisory & Preparation"],"lifecycle":[{"event":"open","at":"2026-11-12T12:49:07Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":28,"reasons":["conf:0","win:early","comp:brand"],"computed_at":"2026-11-12T13:48:44Z"},"pay":null,"html_url":"https://alion.io/job/ey-credential-protection-senior-security-analyst-1","json_url":"https://alion.io/job/ey-credential-protection-senior-security-analyst-1.json","meta":{"generated_at":"2026-11-12T13:48:44Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":28720,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2859},"rest":"https://alion.io/mcp/rest/get_company?id=2859"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fey-credential-protection-senior-security-analyst-1"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fey-credential-protection-senior-security-analyst-1"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fey-credential-protection-senior-security-analyst-1"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ey-credential-protection-senior-security-analyst-1\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fey-credential-protection-senior-security-analyst-1"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4163262}},{"tool":"search_jobs","arguments":{"company":"ey.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4163262},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}