{"id":2933182,"url":"https://alion.io/job/ey-global-information-security-policy-specialist","title":"Global Information Security Policy Specialist","company":{"id":2859,"name":"EY","domain":"ey.com","url":"https://alion.io/company/ey-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Buenos Aires, Argentina"],"countries":["AR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":50000,"max_usd":115000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2225},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"ITIL","optional":false},{"name":"PCI DSS","optional":false},{"name":"Power Apps","optional":false},{"name":"Power BI","optional":false},{"name":"SharePoint","optional":false}],"status":"live","first_seen_at":"2026-10-20T15:14:29Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-20T19:52:21Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Information Security Policy Specialist\nAs an Information Security Policy Specialist, you will help create, maintain, and communicate the global information security (IS) policies and standards that protect EY and client information assets. You will join a global Information Security team of more than 950 professionals who enable EY to work securely, deliver secure products and services, and respond quickly to security events. Together, the team helps protect the EY brand and build client trust.\nAcross the security lifecycle, EY Information Security brings together risk strategy, digital identity, cyber defense, application security, and technology solutions. You will work with security-focused colleagues who support, protect, and enable the business through practical, innovative solutions that deliver speed to market and business value.\nThe opportunity\nThe Technology Assurance, Risk, and Policy (TARP) function supports a coordinated Governance, Risk, and Compliance (GRC) program that aligns governance, risk management, and compliance activities with EY’s objectives and the evolving cybersecurity landscape.\nWithin TARP, the Policy, Risk, and Controls (PRC) Enablement & Awareness team establishes and promotes IS policies and standards that safeguard EY’s digital environment. The team also helps communicate and embed those requirements across the organization.\nAs part of the Global Information Security Policy, Methodology & Awareness teamwithin PRC Enablement & Awareness, you will help strengthen a security-aware culture by translating security requirements into clear policies, education, awareness, and practical guidance.\nYour key responsibilities\nThe Information Security Policy Specialisthelps create and maintain EY Global Information Security policies and standards for technology professionals and the wider EY workforce.\nSuccess in this role requires analytical thinking, creativity, sound judgment, and clear communication. You will collaborate with stakeholders across EY to evaluate requirements, develop practical policy solutions, and present recommendations to technical and non-technical audiences.\nKey responsibilities include:\nMaintain a structured global framework for managing Information Security policies and standards throughout their lifecycle.\nDevelop, update, and maintain IS policies and standards in collaboration with cross-functional teams consisting of both technical and non-technical personnel, drawing on international standards, industry practices, regulatory requirements, and business needs gathered from subject matter experts and key stakeholders across the firm.\nAssess IS policy gaps and recommend new or revised requirements that align EY with business needs and industry practices.\nReview IS policies and standards regularly to validate their relevance, accuracy, and continued applicability.\nTranslate input from subject matter experts, vendors, and industry sources into clear, consistent, and actionable IS policies and standards for both technical and non-technical audiences.\nAlign Information Security documents and supporting materials with related EY policies and standards.\nCommunicate IS policy requirements through clear written guidance, presentations, and stakeholder discussions tailored to relevant audiences.\nContribute to proposals and related written materials as needed.\nTrack and report on IS policy program metrics.\nSkills and attributes for success\nWorking knowledge of Information Security concepts and principles for handling and protecting information.\nStrong analytical and research skills, with close attention to detail, and ability to respond to complex challenges with innovative solutions.\nAbility to translate complex technical information into clear business language for technical and non-technical audiences.\nConfident listening, writing, presentation, and influencing skills across departments and levels of the organization.\nAbility to collaborate effectively, build trusted relationships, and work across global, cross-cultural teams.\nAbility to learn new technologies and adapt to shifting priorities, ambiguity, and rapid change.\nSelf-directed approach, with the organization and judgment to manage multiple projects and make sound decisions.\nProficiency in Microsoft Word, Excel, and PowerPoint.\nIntegrity and professionalism in handling sensitive information and decisions.\nDemonstrated ability to handle adversity.\nTo qualify for the role, you must have\nBachelor’s degree, preferably in Information Security and Assurance, Cybersecurity, Communications, or a related field, or equivalent work experience.\nFive or more years of progressive experience implementing or operating components of a company document management program and document governance practices, or similar role.\nFive or more years of experience in security compliance, IT risk management, IT audit, or Information Security assurance.\nPractical experience drafting Information Security policies, standards, guidelines, processes, or procedures.\nPractical knowledge of one or more relevant frameworks or regulations, such as the ISO/IEC 27000 series, National Institute of Standards and Technology (NIST) guidance, Payment Card Industry Data Security Standard (PCI DSS), Information Technology Infrastructure Library (ITIL), Control Objectives for Information and Related Technologies (COBIT), EU General Data Protection Regulation (GDPR), or Sarbanes-Oxley Act (SOX).\nDemonstrated project management or change management experience.\nIdeally, you’ll also have\nExperience managing a policy or standards inventory in a document management or GRC platform, such as ConvergePoint.\nProgram or project management experience.\nExperience working in a global virtual environment.\nExperience with Microsoft 365 tools, including SharePoint, Power Apps, and Power BI.\nOne or more relevant certifications, or a commitment to pursue them, such as Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Global Information Assurance Certification (GIAC), Certified Security Awareness Practitioner (CSAP), or SANS Security Awareness Professional (SSAP).\nWhat we look for\nWe look for a curious, collaborative professional who solves problems creatively, remains open to new perspectives, and builds positive relationships across teams, regions, and cultures. You are motivated to grow, improve how work gets done, and deliver high-quality service with a strong focus on stakeholder needs.\nWhat we offer\nIn this role, you will join a highly coordinated, globally diverse team and gain the tools and opportunities to grow, develop, and move your career forward. You can combine global opportunities with flexible working, supported by an EY benefits package focused on physical, emotional, financial, and social well-being. Your recruiter can explain the benefits available in your country. Here is a snapshot of what we offer:\nContinuous learning: You will develop the mindset and skills to navigate whatever comes next.\nSuccess as defined by you: We will provide the tools and flexibility, so you can make a significant impact, your way.\nTransformative leadership: We will give you the insights, coaching and confidence to be the leader the world needs.\nDiverse and inclusive culture: You will be accepted for who you are and empowered to use your voice to help others find theirs.\nWe ensure that individuals with disabilities are provided reasonable accommodations to participate in the job application or interview process, to perform essential job functions and to receive other benefits and privileges of employment. Please contact us to request accommodations.\nEY is committed to being an inclusive employer, and we are happy to consider flexible working arrangements. We strive to achieve the right balance for our people, enabling us to deliver excellent client service whilst allowing you to build your career without sacrificing your personal priorities. While our client-facing professionals can be required to travel regularly, and at times be based at client sites, our flexible working arrangements can help you to achieve a lifestyle balance.\nIf this opportunity reflects your experience and aspirations, we encourage you to apply-even if you do not meet every preferred qualification.\nJoin us in building a better working world.\nApply now.","description_format":"text","description_chars":8503,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Flexible schedule"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Financial Advisory, Valuation & Restructuring","Management Consulting","Tax Advisory & Preparation"],"lifecycle":[{"event":"open","at":"2026-10-20T15:14:29Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":24,"reasons":["conf:2","win:early","comp:brand"],"computed_at":"2026-10-20T22:05:58Z"},"pay":null,"html_url":"https://alion.io/job/ey-global-information-security-policy-specialist","json_url":"https://alion.io/job/ey-global-information-security-policy-specialist.json","meta":{"generated_at":"2026-10-20T22:05:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25838,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2859},"rest":"https://alion.io/mcp/rest/get_company?id=2859"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fey-global-information-security-policy-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fey-global-information-security-policy-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fey-global-information-security-policy-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ey-global-information-security-policy-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fey-global-information-security-policy-specialist"}]}