Manager; ISO

Position: Manager (ISO27001)

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

Confidence in your impact today. Freedom to build tomorrow.

At EY, you can be sure that you’re making a difference – for your client, for society, for your colleagues, and for your own development. At the same time, you’ll have the freedom to work in a way that fits your life. Whether you choose to specialize, broaden your expertise, or grow into leadership, you’re in the driver’s seat. Together with ambitious colleagues in an open and trusted culture, you aim for the best every day.

Big on opportunity, friendly in collaboration. EY provides the resources you need to shape your career and make an impact in your field.

Your new job | About your main responsibilities

Our clients are under constant pressure from their customers and stakeholders to demonstrate compliance with Cybersecurity and Privacy/GDPR standards and that's where EY Attestation and Certifications assists them via certification services. The team is expanding its certification and implementation services on management systems for a broad range of standards. As a manager, you will discover the best of two worlds. You will be part of a team that offers certification services and advice to national and international clients in the telecom, technology and media sector among others.

You will combine your subject matter expertise with your leadership skills, guide teams through complex projects, and contribute to the development of our services and market position globally. You will also perform certification audits for security and privacy‑related controls for our clients, proving workshops and training sessions on related topics.

A role where no two days are the same – so you’ll find yourself taking on plenty of new responsibilities as you go. You’ll work alongside clients and colleagues, balancing your time between business development, traveling, providing workshops and supporting client audits.

You will work in a constantly changing environment. Since the position is for a team that works on a global scale within EY, there are international travel opportunities.

Your new team | About your colleagues and the office

Within the Technology Risk department, we focus on analyzing IT‑systems, processes, and cybersecurity. Our focus area is on the business, IT and financial side of large organizations. Specifically, we help make IT‑risks transparent and manageable. In this way, we provide society and the financial markets with the confidence that technologies are being used safely, for example, privacy‑sensitive and financial data are processed securely.

We work closely with financial auditors at clients in various sectors to support the financial statement audit.

Your office in Amsterdam

Our Amsterdam office is located at the Zuidas: a bustling area full of companies. In our Cross Towers, we welcome up to 1,500 people every day. For a breathtaking view of the city, head to the 22nd floor. Collaboration takes on a new meaning in our Wavespace, a high‑tech environment that connects clients and colleagues virtually across the globe.

Your skills and strengths | About your unique contribution

• Relevant Master's degree in Computer Science, IT Auditing, Information Systems and/or Privacy Law.
• Have 5+ years of hands on audit or implementation experience with ISO standards such as ISO 27001, ISO 27701, ISO 23301 amongst others.
• Ability to create and lead business development opportunities.
• Lead and manage a team of auditors, and help them develop and enhance their own skills.
• Knowledge of IT auditing and advanced knowledge of IT general controls (security, change management, disaster backup recovery, datacenter, infrastructure, etc.), IT governance processes (ITIL) is a plus.
• Ability to critically review security policies and procedures, design and implementation of security policies, procedures, standards and controls in line with regulation and/or current standards, ISO
  27001, NIST, SANS.
• Good understanding of industry standards in…