Senior Cyber Risk Specialist

Job not on LinkedIn

🔥 2 hours ago

🇧🇷 Brazil – Remote

⏰ Full Time

🟠 Senior

👻 Ghost score 12%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

EY

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1989

🏥 Healthcare

⚖️ Legal

📣 Marketing

Healthcare • Legal • Marketing

EY is a global professional services firm, widely recognized for providing audit, tax, consulting, and advisory services. It focuses on helping its clients solve complex problems and transform their businesses using data and technology. EY is committed to building a better working world by enhancing trust in financial markets and economies globally. Its services include corporate finance advisory, transaction strategy, technology consulting, and more, catering to sectors such as health, energy, finance, government, and more. EY also emphasizes sustainability and innovation in its solutions.

📋 Description

• Support the development and evolution of Cyber Risk Management frameworks and methodologies • Identify, analyze, and assess cyber risk scenarios • Conduct inherent and residual risk assessments • Assess the design and maturity of security controls • Support Risk Acceptance, Exception Management, and Risk Treatment processes • Develop and monitor KRIs, KPIs, Risk Registers, and dashboards • Support Cyber Risk assessments related to vendors and third parties • Connect cyber risks to Technology, Privacy, Resilience, and Operational Risk • Conduct interviews and workshops with technical and business stakeholders • Prepare risk reports and presentations for executive audiences • Work on an international project, collaborating with technical and business stakeholders in a global environment

🎯 Requirements

• Experience in Cyber Risk, Information Security Risk, Technology Risk, or related areas • Solid knowledge of Risk Management methodologies • Experience identifying and assessing cyber risk scenarios • Experience conducting inherent and residual risk assessments • Experience assessing the design and maturity of security controls • Ability to translate vulnerabilities and technology risks into potential business impacts and recommendations • Strong communication skills with technical and non-technical stakeholders • Advanced or fluent English • Experience with Third-Party or Vendor Cyber Risk (a plus) • Experience with Risk Acceptance, Exception Management, and Risk Treatment Plans (a plus) • Knowledge of KRIs, KPIs, Risk Registers, and dashboards (a plus) • Experience involving Technology, Privacy, Resilience, or Operational Risk (a plus) • Certifications such as CRISC, CISSP, CISM, CISA, or certifications related to ISO 27001 (a plus)

🏖️ Benefits

• Medical and dental insurance • Childcare assistance • EY benefits and exclusive discounts platform • Education incentives • Birthday day off • Gympass/Wellhub • Profit-sharing program (PLR) • Private pension plan • Meal and/or food and transportation vouchers • Flexible work environment • Diverse and inclusive culture • Diversity and equity programs and employee groups • Development focused on future-ready skills • World-class experiences