EY Client Security Assurance Legal Specialist in Jacksonville, Florida
Client Security Assurance Legal Specialist
Core Business Services
Requisition # JAC000L0
Post Date Nov 05, 2020
Technology has always been at the heart of what we do and deliver at EY. We need technology to keep an organization the size of ours working efficiently. We have 250,000 people in more than 140 countries, all of whom rely on secure technology to be able to do their job every single day. Everything from the laptops we use, to the ability to work remotely on our mobile devices and connecting our people and our clients, to enabling hundreds of internal tools and external solutions delivered to our clients. Technology solutions are integrated in the client services we deliver and is key to us being more innovative as an organization.
EY Technology supports our technology needs through three business units:
Client Technology (CT) - focuses on developing new technology services for our clients. It enables EY to identify new technology-based opportunities faster and pursue those opportunities more rapidly.
Enterprise Technology (ET) – ET supports our Core Business Services functions and will deliver fit-for-purpose technology infrastructure at the cheapest possible cost for quality services. ET will also support our internal technology needs by focusing on a better user experience.
Information Security (Info Sec) - Info Sec prevents, detects, responds and mitigates cyber-risk, protecting EY and client data, and our information management systems.
Information Security has an opportunity at an Associate Director level to support EY Legal and engagement teams in the assessment of information security clauses in EY client contractual agreements.
The role involves reviewing client contracts and offering alternate wording as needed regarding the security of the EY professional services we offer via traditional and cloud-based technology solutions. You’ll be part of a truly collaborative environment working with a team dedicated to providing accurate, appropriate and consistent responses to these inquiries. As part of that, we’ll need you to have technical knowledge of information security and data protection topics including but not limited to the security of applications; operating systems; internet and intranet; physical security (e.g. access control and perimeter protection); networks; risk assessment; critical infrastructure continuity and contingency planning; emergency preparedness; security awareness and training.
You’re likely to balance your time between multiple requests and responsibilities, supporting your team on exciting engagements while learning about EY’s leading-edge technologies. It’s all about client satisfaction and assurance that EY will protect client data wherever it is stored.
This position requires excellent English language speaking, reading and writing abilities.
Your key responsibilities
Interface with EY Legal and engagement teams to evaluate client contractual clauses related to the security of the services and technologies we deliver and confirm compliance with EY information security standards.
Work with EY engagement teams to translate EY’s global information security expectations.
Participate in client discussions to negotiate contractual terms.
Provide written and/or verbal recommendations for procedural changes for management review.
Work independently with minimal oversight from management.
Minimal travel required.
Skills and attributes for success
Although this is not a client facing role, the successful candidate will have experience interfacing with external clients. Excellent communication and negotiation skills are key attributes in order to succeed in this position.
To qualify for the role you must have
Ten or more years of experience in a large corporate environment
Experience reviewing and negotiating contractual agreements
Experience working with common information security standards, such as ISO 27001/27002, NIST, ITIL, COBIT
Understanding of security related regulatory and data privacy concerns globally
Flexibility to adjust to multiple demands, shifting priorities, ambiguity, and rapid change
Experience translating information security concepts into business and technical language
Ideally, you’ll also have a selection of the following
An advanced degree in Computer Science, Information Security, Law or a related major
Professional certifications such as CISSP, GIAC, CISM, CISA or legal degree
Experience with cloud security concepts
What we look for
An individual who communicates clearly and with self-confidence
Ability to understand and integrate cultural differences and work effectively in cross cultural teams
Demonstrated integrity and judgment within a professional environment
Outstanding interpersonal, communication, organizational, and decision-making skills
The demonstrated characteristics of a forward thinker and self-motivator who thrives on new challenges and adapts to learning new knowledge
What working at EY offers
Support, coaching and feedback from some of the most engaging colleagues around
Opportunities to develop new skills and progress your career
EY strives to achieve the right balance for our people, enabling us to deliver excellent client service whilst allowing you to build your career without sacrificing your personal priorities. While our client-facing professionals can be required to travel regularly, and at times be based at client sites, our flexible working arrangements can help you to achieve a lifestyle balance.
As a global leader in assurance, tax, transaction and advisory services, we’re using the finance products, expertise and systems we’ve developed to build a better working world. That starts with a culture that believes in giving you the training, opportunities and creative freedom to make things better. Whenever you join, however long you stay, the exceptional EY experience lasts a lifetime. And with a commitment to hiring and developing the most passionate people, we’ll make our ambition to be the best employer by 2020 a reality.
If you can confidently demonstrate that you meet the criteria above, please contact us as soon as possible.
Build your legacy with us.
EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, national origin, protected veteran status, disability status, or any other legally protected basis, in accordance with applicable law.