949 Security Assessment jobs in the United States
Security Assessment & Remediation, (AVP)
Posted 3 days ago
Job Viewed
Job Description
Do you want your voice heard and your actions to count?
Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world's leading financial groups. Across the globe, we're 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.
With a vision to be the world's most trusted financial group, it's part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.
Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.
The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details.
Job Summary:
In this role you will focus on executing infrastructure vulnerability assessments across the enterprise and ensuring relevant stakeholders are informed and empowered to take corrective actions. This includes conducting security assessments across enterprise infrastructure, performing in-depth vulnerability analysis and supporting remediation activities in collaboration with engineering, operations, and application teams. This position is crucial in identifying, analyzing and reducing risk exposure across enterprise networks, servers, endpoints, and cloud environment.
Responsibilities:
-
Perform comprehensive vulnerability assessments of the organization's infrastructure, including networks, servers, and endpoints.
-
Utilize scanning tools to conduct regular vulnerability scans, analyze results, and prioritize remediation efforts.
-
Collaborate with IT and security teams to develop and implement vulnerability remediation plans.
-
Monitor industry trends and emerging threats to proactively identify potential vulnerabilities and recommend preventive measures.
-
Contribute to the development and maintenance of vulnerability management policies, procedures, and best practices.
-
Provide technical expertise and guidance to internal teams to ensure compliance with security standards and regulations.
-
Conduct vulnerability assessments on a regular basis to assess the effectiveness of security controls.
-
Generate and present reports on vulnerability assessment findings, risk assessments, and remediation progress to stakeholders.
-
Stay current with cybersecurity threats and vulnerabilities and continuously enhance knowledge and skills.
Qualifications:
-
Minimum of 5+ years of experience in cybersecurity, risk and vulnerability assessments at scale in a large, highly regulated environment.
-
Experience in infrastructure vulnerability assessments, risk analysis, and compliance testing.
-
Strong understanding of infrastructure components including networking, firewalls, cloud (AWS/Azure), Windows/Linux servers and virtualization.
-
Hands-on experience with vulnerability management tools such as Qualys, ACS, ServiceNow VR or Power BI
-
Strong analyzing and communication skills to work cross-functionally across teams.
-
Ability to clearly and concisely present vulnerability information both written and verbally appropriate for the audience ranging from in-depth technical analysis to providing executive reporting.
-
Ability to act as a single contributor as well as part of a technical cross-functional team.
-
Bachelor's degree in Information Technology, Cyber Security, Computer Science, or related discipline equivalent work experience is equally preferable.
Preferred:
-
Financial Institution Experience
-
Certified Information Systems Security Professional (CISSP),
-
Global Information Assurance Certification (GIAC),
-
Certified Information System Auditor (CISA) or other security certifications
-
Knowledge of information security standards, rules and regulations related to information security and data confidentiality and desktop, server, application, database, network security principles for risk identification and analysis.
The typical base pay range for this role is between $108K - $131K depending on job-related knowledge, skills, experience, and location. This role may also be eligible for certain discretionary performance-based bonus and/or incentive compensation. Additionally, our Total Rewards program provides colleagues with a competitive benefits package (in accordance with the eligibility requirements and respective terms of each) that includes comprehensive health and wellness benefits, retirement plans, educational assistance and training programs, income replacement for qualified employees with disabilities, paid maternity and parental bonding leave, paid vacation, sick days, and holidays. For more information on our Total Rewards package, please click the link below.
MUFG Benefits Summary (
We will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws (including (i) the San Francisco Fair Chance Ordinance, (ii) the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance, (iii) the Los Angeles County Fair Chance Ordinance, and (iv) the California Fair Chance Act) to the extent that (a) an applicant is not subject to a statutory disqualification pursuant to Section 3(a)(39) of the Securities and Exchange Act of 1934 or Section 8a(2) or 8a(3) of the Commodity Exchange Act, and (b) they do not conflict with the background screening requirements of the Financial Industry Regulatory Authority (FINRA) and the National Futures Association (NFA). The major responsibilities listed above are the material job duties of this role for which the Company reasonably believes that criminal history may have a direct, adverse and negative relationship potentially resulting in the withdrawal of conditional offer of employment, if any.
The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities duties and skills required of personnel so classified.
We are proud to be an Equal Opportunity Employer and committed to leveraging the diverse backgrounds, perspectives and experience of our workforce to create opportunities for our colleagues and our business. We do not discriminate on the basis of race, color, national origin, religion, gender expression, gender identity, sex, age, ancestry, marital status, protected veteran and military status, disability, medical condition, sexual orientation, genetic information, or any other status of an individual or that individual's associates or relatives that is protected under applicable federal, state, or local law.
At MUFG, our colleagues are our greatest assets. Our Culture Principles provide a roadmap for how each of our colleagues must think and act to become more client-obsessed, inclusive and innovative. They reflect who we are, who we want to be and what we expect from one another. We are excited to see you take the next step in exploring a career with us and encourage you to spend more time reviewing them!
Our Culture Principles
-
Client Centric
-
People Focused
-
Listen Up. Speak Up.
-
Innovate & Simplify
-
Own & Execute
Security Assessment & Remediation, (AVP)
Posted 3 days ago
Job Viewed
Job Description
Do you want your voice heard and your actions to count?
Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world's leading financial groups. Across the globe, we're 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.
With a vision to be the world's most trusted financial group, it's part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.
Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.
The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details.
Job Summary:
In this role you will focus on executing infrastructure vulnerability assessments across the enterprise and ensuring relevant stakeholders are informed and empowered to take corrective actions. This includes conducting security assessments across enterprise infrastructure, performing in-depth vulnerability analysis and supporting remediation activities in collaboration with engineering, operations, and application teams. This position is crucial in identifying, analyzing and reducing risk exposure across enterprise networks, servers, endpoints, and cloud environment.
Responsibilities:
-
Perform comprehensive vulnerability assessments of the organization's infrastructure, including networks, servers, and endpoints.
-
Utilize scanning tools to conduct regular vulnerability scans, analyze results, and prioritize remediation efforts.
-
Collaborate with IT and security teams to develop and implement vulnerability remediation plans.
-
Monitor industry trends and emerging threats to proactively identify potential vulnerabilities and recommend preventive measures.
-
Contribute to the development and maintenance of vulnerability management policies, procedures, and best practices.
-
Provide technical expertise and guidance to internal teams to ensure compliance with security standards and regulations.
-
Conduct vulnerability assessments on a regular basis to assess the effectiveness of security controls.
-
Generate and present reports on vulnerability assessment findings, risk assessments, and remediation progress to stakeholders.
-
Stay current with cybersecurity threats and vulnerabilities and continuously enhance knowledge and skills.
Qualifications:
-
Minimum of 5+ years of experience in cybersecurity, risk and vulnerability assessments at scale in a large, highly regulated environment.
-
Experience in infrastructure vulnerability assessments, risk analysis, and compliance testing.
-
Strong understanding of infrastructure components including networking, firewalls, cloud (AWS/Azure), Windows/Linux servers and virtualization.
-
Hands-on experience with vulnerability management tools such as Qualys, ACS, ServiceNow VR or Power BI
-
Strong analyzing and communication skills to work cross-functionally across teams.
-
Ability to clearly and concisely present vulnerability information both written and verbally appropriate for the audience ranging from in-depth technical analysis to providing executive reporting.
-
Ability to act as a single contributor as well as part of a technical cross-functional team.
-
Bachelor's degree in Information Technology, Cyber Security, Computer Science, or related discipline equivalent work experience is equally preferable.
Preferred:
-
Financial Institution Experience
-
Certified Information Systems Security Professional (CISSP),
-
Global Information Assurance Certification (GIAC),
-
Certified Information System Auditor (CISA) or other security certifications
-
Knowledge of information security standards, rules and regulations related to information security and data confidentiality and desktop, server, application, database, network security principles for risk identification and analysis.
The typical base pay range for this role is between $108K - $131K depending on job-related knowledge, skills, experience, and location. This role may also be eligible for certain discretionary performance-based bonus and/or incentive compensation. Additionally, our Total Rewards program provides colleagues with a competitive benefits package (in accordance with the eligibility requirements and respective terms of each) that includes comprehensive health and wellness benefits, retirement plans, educational assistance and training programs, income replacement for qualified employees with disabilities, paid maternity and parental bonding leave, paid vacation, sick days, and holidays. For more information on our Total Rewards package, please click the link below.
MUFG Benefits Summary (
We will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws (including (i) the San Francisco Fair Chance Ordinance, (ii) the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance, (iii) the Los Angeles County Fair Chance Ordinance, and (iv) the California Fair Chance Act) to the extent that (a) an applicant is not subject to a statutory disqualification pursuant to Section 3(a)(39) of the Securities and Exchange Act of 1934 or Section 8a(2) or 8a(3) of the Commodity Exchange Act, and (b) they do not conflict with the background screening requirements of the Financial Industry Regulatory Authority (FINRA) and the National Futures Association (NFA). The major responsibilities listed above are the material job duties of this role for which the Company reasonably believes that criminal history may have a direct, adverse and negative relationship potentially resulting in the withdrawal of conditional offer of employment, if any.
The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities duties and skills required of personnel so classified.
We are proud to be an Equal Opportunity Employer and committed to leveraging the diverse backgrounds, perspectives and experience of our workforce to create opportunities for our colleagues and our business. We do not discriminate on the basis of race, color, national origin, religion, gender expression, gender identity, sex, age, ancestry, marital status, protected veteran and military status, disability, medical condition, sexual orientation, genetic information, or any other status of an individual or that individual's associates or relatives that is protected under applicable federal, state, or local law.
At MUFG, our colleagues are our greatest assets. Our Culture Principles provide a roadmap for how each of our colleagues must think and act to become more client-obsessed, inclusive and innovative. They reflect who we are, who we want to be and what we expect from one another. We are excited to see you take the next step in exploring a career with us and encourage you to spend more time reviewing them!
Our Culture Principles
-
Client Centric
-
People Focused
-
Listen Up. Speak Up.
-
Innovate & Simplify
-
Own & Execute
Security Assessment & Remediation, (AVP)
Posted 3 days ago
Job Viewed
Job Description
Do you want your voice heard and your actions to count?
Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world's leading financial groups. Across the globe, we're 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.
With a vision to be the world's most trusted financial group, it's part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.
Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.
The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details.
Job Summary:
In this role you will focus on executing infrastructure vulnerability assessments across the enterprise and ensuring relevant stakeholders are informed and empowered to take corrective actions. This includes conducting security assessments across enterprise infrastructure, performing in-depth vulnerability analysis and supporting remediation activities in collaboration with engineering, operations, and application teams. This position is crucial in identifying, analyzing and reducing risk exposure across enterprise networks, servers, endpoints, and cloud environment.
Responsibilities:
-
Perform comprehensive vulnerability assessments of the organization's infrastructure, including networks, servers, and endpoints.
-
Utilize scanning tools to conduct regular vulnerability scans, analyze results, and prioritize remediation efforts.
-
Collaborate with IT and security teams to develop and implement vulnerability remediation plans.
-
Monitor industry trends and emerging threats to proactively identify potential vulnerabilities and recommend preventive measures.
-
Contribute to the development and maintenance of vulnerability management policies, procedures, and best practices.
-
Provide technical expertise and guidance to internal teams to ensure compliance with security standards and regulations.
-
Conduct vulnerability assessments on a regular basis to assess the effectiveness of security controls.
-
Generate and present reports on vulnerability assessment findings, risk assessments, and remediation progress to stakeholders.
-
Stay current with cybersecurity threats and vulnerabilities and continuously enhance knowledge and skills.
Qualifications:
-
Minimum of 5+ years of experience in cybersecurity, risk and vulnerability assessments at scale in a large, highly regulated environment.
-
Experience in infrastructure vulnerability assessments, risk analysis, and compliance testing.
-
Strong understanding of infrastructure components including networking, firewalls, cloud (AWS/Azure), Windows/Linux servers and virtualization.
-
Hands-on experience with vulnerability management tools such as Qualys, ACS, ServiceNow VR or Power BI
-
Strong analyzing and communication skills to work cross-functionally across teams.
-
Ability to clearly and concisely present vulnerability information both written and verbally appropriate for the audience ranging from in-depth technical analysis to providing executive reporting.
-
Ability to act as a single contributor as well as part of a technical cross-functional team.
-
Bachelor's degree in Information Technology, Cyber Security, Computer Science, or related discipline equivalent work experience is equally preferable.
Preferred:
-
Financial Institution Experience
-
Certified Information Systems Security Professional (CISSP),
-
Global Information Assurance Certification (GIAC),
-
Certified Information System Auditor (CISA) or other security certifications
-
Knowledge of information security standards, rules and regulations related to information security and data confidentiality and desktop, server, application, database, network security principles for risk identification and analysis.
The typical base pay range for this role is between $108K - $131K depending on job-related knowledge, skills, experience, and location. This role may also be eligible for certain discretionary performance-based bonus and/or incentive compensation. Additionally, our Total Rewards program provides colleagues with a competitive benefits package (in accordance with the eligibility requirements and respective terms of each) that includes comprehensive health and wellness benefits, retirement plans, educational assistance and training programs, income replacement for qualified employees with disabilities, paid maternity and parental bonding leave, paid vacation, sick days, and holidays. For more information on our Total Rewards package, please click the link below.
MUFG Benefits Summary (
We will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws (including (i) the San Francisco Fair Chance Ordinance, (ii) the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance, (iii) the Los Angeles County Fair Chance Ordinance, and (iv) the California Fair Chance Act) to the extent that (a) an applicant is not subject to a statutory disqualification pursuant to Section 3(a)(39) of the Securities and Exchange Act of 1934 or Section 8a(2) or 8a(3) of the Commodity Exchange Act, and (b) they do not conflict with the background screening requirements of the Financial Industry Regulatory Authority (FINRA) and the National Futures Association (NFA). The major responsibilities listed above are the material job duties of this role for which the Company reasonably believes that criminal history may have a direct, adverse and negative relationship potentially resulting in the withdrawal of conditional offer of employment, if any.
The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities duties and skills required of personnel so classified.
We are proud to be an Equal Opportunity Employer and committed to leveraging the diverse backgrounds, perspectives and experience of our workforce to create opportunities for our colleagues and our business. We do not discriminate on the basis of race, color, national origin, religion, gender expression, gender identity, sex, age, ancestry, marital status, protected veteran and military status, disability, medical condition, sexual orientation, genetic information, or any other status of an individual or that individual's associates or relatives that is protected under applicable federal, state, or local law.
At MUFG, our colleagues are our greatest assets. Our Culture Principles provide a roadmap for how each of our colleagues must think and act to become more client-obsessed, inclusive and innovative. They reflect who we are, who we want to be and what we expect from one another. We are excited to see you take the next step in exploring a career with us and encourage you to spend more time reviewing them!
Our Culture Principles
-
Client Centric
-
People Focused
-
Listen Up. Speak Up.
-
Innovate & Simplify
-
Own & Execute
Security Assessment & Remediation, (AVP)

Posted 2 days ago
Job Viewed
Job Description
Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world's leading financial groups. Across the globe, we're 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.
With a vision to be the world's most trusted financial group, it's part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.
Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.
The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details.
**Job Summary:**
In this role you will focus on executing infrastructure vulnerability assessments across the enterprise and ensuring relevant stakeholders are informed and empowered to take corrective actions. This includes conducting security assessments across enterprise infrastructure, performing in-depth vulnerability analysis and supporting remediation activities in collaboration with engineering, operations, and application teams. This position is crucial in identifying, analyzing and reducing risk exposure across enterprise networks, servers, endpoints, and cloud environment.
**Responsibilities:**
+ Perform comprehensive vulnerability assessments of the organization's infrastructure, including networks, servers, and endpoints.
+ Utilize scanning tools to conduct regular vulnerability scans, analyze results, and prioritize remediation efforts.
+ Collaborate with IT and security teams to develop and implement vulnerability remediation plans.
+ Monitor industry trends and emerging threats to proactively identify potential vulnerabilities and recommend preventive measures.
+ Contribute to the development and maintenance of vulnerability management policies, procedures, and best practices.
+ Provide technical expertise and guidance to internal teams to ensure compliance with security standards and regulations.
+ Conduct vulnerability assessments on a regular basis to assess the effectiveness of security controls.
+ Generate and present reports on vulnerability assessment findings, risk assessments, and remediation progress to stakeholders.
+ Stay current with cybersecurity threats and vulnerabilities and continuously enhance knowledge and skills.
**Qualifications:**
+ Minimum of 5+ years of experience in cybersecurity, risk and vulnerability assessments at scale in a large, highly regulated environment.
+ Experience in infrastructure vulnerability assessments, risk analysis, and compliance testing.
+ Strong understanding of infrastructure components including networking, firewalls, cloud (AWS/Azure), Windows/Linux servers and virtualization.
+ Hands-on experience with vulnerability management tools such as Qualys, ACS, ServiceNow VR or Power BI
+ Strong analyzing and communication skills to work cross-functionally across teams.
+ Ability to clearly and concisely present vulnerability information both written and verbally appropriate for the audience ranging from in-depth technical analysis to providing executive reporting.
+ Ability to act as a single contributor as well as part of a technical cross-functional team.
+ Bachelor's degree in Information Technology, Cyber Security, Computer Science, or related discipline equivalent work experience is equally preferable.
**Preferred:**
+ Financial Institution Experience
+ Certified Information Systems Security Professional (CISSP),
+ Global Information Assurance Certification (GIAC),
+ Certified Information System Auditor (CISA) or other security certifications
+ Knowledge of information security standards, rules and regulations related to information security and data confidentiality and desktop, server, application, database, network security principles for risk identification and analysis.
The typical base pay range for this role is between $108K - $131K depending on job-related knowledge, skills, experience, and location. This role may also be eligible for certain discretionary performance-based bonus and/or incentive compensation. Additionally, our Total Rewards program provides colleagues with a competitive benefits package (in accordance with the eligibility requirements and respective terms of each) that includes comprehensive health and wellness benefits, retirement plans, educational assistance and training programs, income replacement for qualified employees with disabilities, paid maternity and parental bonding leave, paid vacation, sick days, and holidays. For more information on our Total Rewards package, please click the link below.
MUFG Benefits Summary ( will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws (including (i) the San Francisco Fair Chance Ordinance, (ii) the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance, (iii) the Los Angeles County Fair Chance Ordinance, and (iv) the California Fair Chance Act) to the extent that (a) an applicant is not subject to a statutory disqualification pursuant to Section 3(a)(39) of the Securities and Exchange Act of 1934 or Section 8a(2) or 8a(3) of the Commodity Exchange Act, and (b) they do not conflict with the background screening requirements of the Financial Industry Regulatory Authority (FINRA) and the National Futures Association (NFA). The major responsibilities listed above are the material job duties of this role for which the Company reasonably believes that criminal history may have a direct, adverse and negative relationship potentially resulting in the withdrawal of conditional offer of employment, if any.
The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities duties and skills required of personnel so classified.
We are proud to be an Equal Opportunity Employer and committed to leveraging the diverse backgrounds, perspectives and experience of our workforce to create opportunities for our colleagues and our business. We do not discriminate on the basis of race, color, national origin, religion, gender expression, gender identity, sex, age, ancestry, marital status, protected veteran and military status, disability, medical condition, sexual orientation, genetic information, or any other status of an individual or that individual's associates or relatives that is protected under applicable federal, state, or local law.
At MUFG, our colleagues are our greatest assets. Our Culture Principles provide a roadmap for how each of our colleagues must think and act to become more client-obsessed, inclusive and innovative. They reflect who we are, who we want to be and what we expect from one another. We are excited to see you take the next step in exploring a career with us and encourage you to spend more time reviewing them!
**Our Culture Principles**
+ Client Centric
+ People Focused
+ Listen Up. Speak Up.
+ Innovate & Simplify
+ Own & Execute
Security Assessment & Remediation, (AVP)

Posted 2 days ago
Job Viewed
Job Description
Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world's leading financial groups. Across the globe, we're 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.
With a vision to be the world's most trusted financial group, it's part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.
Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.
The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details.
**Job Summary:**
In this role you will focus on executing infrastructure vulnerability assessments across the enterprise and ensuring relevant stakeholders are informed and empowered to take corrective actions. This includes conducting security assessments across enterprise infrastructure, performing in-depth vulnerability analysis and supporting remediation activities in collaboration with engineering, operations, and application teams. This position is crucial in identifying, analyzing and reducing risk exposure across enterprise networks, servers, endpoints, and cloud environment.
**Responsibilities:**
+ Perform comprehensive vulnerability assessments of the organization's infrastructure, including networks, servers, and endpoints.
+ Utilize scanning tools to conduct regular vulnerability scans, analyze results, and prioritize remediation efforts.
+ Collaborate with IT and security teams to develop and implement vulnerability remediation plans.
+ Monitor industry trends and emerging threats to proactively identify potential vulnerabilities and recommend preventive measures.
+ Contribute to the development and maintenance of vulnerability management policies, procedures, and best practices.
+ Provide technical expertise and guidance to internal teams to ensure compliance with security standards and regulations.
+ Conduct vulnerability assessments on a regular basis to assess the effectiveness of security controls.
+ Generate and present reports on vulnerability assessment findings, risk assessments, and remediation progress to stakeholders.
+ Stay current with cybersecurity threats and vulnerabilities and continuously enhance knowledge and skills.
**Qualifications:**
+ Minimum of 5+ years of experience in cybersecurity, risk and vulnerability assessments at scale in a large, highly regulated environment.
+ Experience in infrastructure vulnerability assessments, risk analysis, and compliance testing.
+ Strong understanding of infrastructure components including networking, firewalls, cloud (AWS/Azure), Windows/Linux servers and virtualization.
+ Hands-on experience with vulnerability management tools such as Qualys, ACS, ServiceNow VR or Power BI
+ Strong analyzing and communication skills to work cross-functionally across teams.
+ Ability to clearly and concisely present vulnerability information both written and verbally appropriate for the audience ranging from in-depth technical analysis to providing executive reporting.
+ Ability to act as a single contributor as well as part of a technical cross-functional team.
+ Bachelor's degree in Information Technology, Cyber Security, Computer Science, or related discipline equivalent work experience is equally preferable.
**Preferred:**
+ Financial Institution Experience
+ Certified Information Systems Security Professional (CISSP),
+ Global Information Assurance Certification (GIAC),
+ Certified Information System Auditor (CISA) or other security certifications
+ Knowledge of information security standards, rules and regulations related to information security and data confidentiality and desktop, server, application, database, network security principles for risk identification and analysis.
The typical base pay range for this role is between $108K - $131K depending on job-related knowledge, skills, experience, and location. This role may also be eligible for certain discretionary performance-based bonus and/or incentive compensation. Additionally, our Total Rewards program provides colleagues with a competitive benefits package (in accordance with the eligibility requirements and respective terms of each) that includes comprehensive health and wellness benefits, retirement plans, educational assistance and training programs, income replacement for qualified employees with disabilities, paid maternity and parental bonding leave, paid vacation, sick days, and holidays. For more information on our Total Rewards package, please click the link below.
MUFG Benefits Summary ( will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws (including (i) the San Francisco Fair Chance Ordinance, (ii) the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance, (iii) the Los Angeles County Fair Chance Ordinance, and (iv) the California Fair Chance Act) to the extent that (a) an applicant is not subject to a statutory disqualification pursuant to Section 3(a)(39) of the Securities and Exchange Act of 1934 or Section 8a(2) or 8a(3) of the Commodity Exchange Act, and (b) they do not conflict with the background screening requirements of the Financial Industry Regulatory Authority (FINRA) and the National Futures Association (NFA). The major responsibilities listed above are the material job duties of this role for which the Company reasonably believes that criminal history may have a direct, adverse and negative relationship potentially resulting in the withdrawal of conditional offer of employment, if any.
The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities duties and skills required of personnel so classified.
We are proud to be an Equal Opportunity Employer and committed to leveraging the diverse backgrounds, perspectives and experience of our workforce to create opportunities for our colleagues and our business. We do not discriminate on the basis of race, color, national origin, religion, gender expression, gender identity, sex, age, ancestry, marital status, protected veteran and military status, disability, medical condition, sexual orientation, genetic information, or any other status of an individual or that individual's associates or relatives that is protected under applicable federal, state, or local law.
At MUFG, our colleagues are our greatest assets. Our Culture Principles provide a roadmap for how each of our colleagues must think and act to become more client-obsessed, inclusive and innovative. They reflect who we are, who we want to be and what we expect from one another. We are excited to see you take the next step in exploring a career with us and encourage you to spend more time reviewing them!
**Our Culture Principles**
+ Client Centric
+ People Focused
+ Listen Up. Speak Up.
+ Innovate & Simplify
+ Own & Execute
Security Assessment & Remediation, (AVP)
Posted 4 days ago
Job Viewed
Job Description
Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world's leading financial groups. Across the globe, we're 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.
With a vision to be the world's most trusted financial group, it's part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.
Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.
The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details.
**Job Summary:**
In this role you will focus on executing infrastructure vulnerability assessments across the enterprise and ensuring relevant stakeholders are informed and empowered to take corrective actions. This includes conducting security assessments across enterprise infrastructure, performing in-depth vulnerability analysis and supporting remediation activities in collaboration with engineering, operations, and application teams. This position is crucial in identifying, analyzing and reducing risk exposure across enterprise networks, servers, endpoints, and cloud environment.
**Responsibilities:**
+ Perform comprehensive vulnerability assessments of the organization's infrastructure, including networks, servers, and endpoints.
+ Utilize scanning tools to conduct regular vulnerability scans, analyze results, and prioritize remediation efforts.
+ Collaborate with IT and security teams to develop and implement vulnerability remediation plans.
+ Monitor industry trends and emerging threats to proactively identify potential vulnerabilities and recommend preventive measures.
+ Contribute to the development and maintenance of vulnerability management policies, procedures, and best practices.
+ Provide technical expertise and guidance to internal teams to ensure compliance with security standards and regulations.
+ Conduct vulnerability assessments on a regular basis to assess the effectiveness of security controls.
+ Generate and present reports on vulnerability assessment findings, risk assessments, and remediation progress to stakeholders.
+ Stay current with cybersecurity threats and vulnerabilities and continuously enhance knowledge and skills.
**Qualifications:**
+ Minimum of 5+ years of experience in cybersecurity, risk and vulnerability assessments at scale in a large, highly regulated environment.
+ Experience in infrastructure vulnerability assessments, risk analysis, and compliance testing.
+ Strong understanding of infrastructure components including networking, firewalls, cloud (AWS/Azure), Windows/Linux servers and virtualization.
+ Hands-on experience with vulnerability management tools such as Qualys, ACS, ServiceNow VR or Power BI
+ Strong analyzing and communication skills to work cross-functionally across teams.
+ Ability to clearly and concisely present vulnerability information both written and verbally appropriate for the audience ranging from in-depth technical analysis to providing executive reporting.
+ Ability to act as a single contributor as well as part of a technical cross-functional team.
+ Bachelor's degree in Information Technology, Cyber Security, Computer Science, or related discipline equivalent work experience is equally preferable.
**Preferred:**
+ Financial Institution Experience
+ Certified Information Systems Security Professional (CISSP),
+ Global Information Assurance Certification (GIAC),
+ Certified Information System Auditor (CISA) or other security certifications
+ Knowledge of information security standards, rules and regulations related to information security and data confidentiality and desktop, server, application, database, network security principles for risk identification and analysis.
The typical base pay range for this role is between $108K - $131K depending on job-related knowledge, skills, experience, and location. This role may also be eligible for certain discretionary performance-based bonus and/or incentive compensation. Additionally, our Total Rewards program provides colleagues with a competitive benefits package (in accordance with the eligibility requirements and respective terms of each) that includes comprehensive health and wellness benefits, retirement plans, educational assistance and training programs, income replacement for qualified employees with disabilities, paid maternity and parental bonding leave, paid vacation, sick days, and holidays. For more information on our Total Rewards package, please click the link below.
MUFG Benefits Summary ( will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws (including (i) the San Francisco Fair Chance Ordinance, (ii) the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance, (iii) the Los Angeles County Fair Chance Ordinance, and (iv) the California Fair Chance Act) to the extent that (a) an applicant is not subject to a statutory disqualification pursuant to Section 3(a)(39) of the Securities and Exchange Act of 1934 or Section 8a(2) or 8a(3) of the Commodity Exchange Act, and (b) they do not conflict with the background screening requirements of the Financial Industry Regulatory Authority (FINRA) and the National Futures Association (NFA). The major responsibilities listed above are the material job duties of this role for which the Company reasonably believes that criminal history may have a direct, adverse and negative relationship potentially resulting in the withdrawal of conditional offer of employment, if any.
The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities duties and skills required of personnel so classified.
We are proud to be an Equal Opportunity Employer and committed to leveraging the diverse backgrounds, perspectives and experience of our workforce to create opportunities for our colleagues and our business. We do not discriminate on the basis of race, color, national origin, religion, gender expression, gender identity, sex, age, ancestry, marital status, protected veteran and military status, disability, medical condition, sexual orientation, genetic information, or any other status of an individual or that individual's associates or relatives that is protected under applicable federal, state, or local law.
At MUFG, our colleagues are our greatest assets. Our Culture Principles provide a roadmap for how each of our colleagues must think and act to become more client-obsessed, inclusive and innovative. They reflect who we are, who we want to be and what we expect from one another. We are excited to see you take the next step in exploring a career with us and encourage you to spend more time reviewing them!
**Our Culture Principles**
+ Client Centric
+ People Focused
+ Listen Up. Speak Up.
+ Innovate & Simplify
+ Own & Execute
Information Security Compliance and Assessment Specialist
Posted 3 days ago
Job Viewed
Job Description
Information Security Compliance and Assessment Specialist
As required by our governmental client, this position requires being a US Citizen AND an active Top Secret or DOE "Q" clearance to be considered.
We are seeking an Information Security Compliance and Assessment Specialist to serve as a Quality and Compliance Advisor for internal information systems. This role requires detailed expertise to ensure conformance to security requirements, identify non-compliance, and enhance information assurance processes.
Compensation & Benefits:
Estimated Starting Salary Range for Information Security Compliance and Assessment Specialist : $110,000 to $120,000
Pay commensurate with experience.
Full time benefits include Medical, Dental, Vision, 401K, and other possible benefits as provided. Benefits are subject to change with or without notice.
Information Security Compliance and Assessment Specialist Responsibilities Include:
- Ensuring the implementation of DOE and NNSA cyber security policies and procedures for information systems
- Performing process and system evaluations (assessments) to ensure compliance with established policies, processes, procedures, and applicable standards
- Validating security control assessments results
- Performing a variety of technical and administrative activities related to the function of QA (auditing), including, but not limited to, scheduling, checklist development, report writing, facilitating root cause/lessons learned analysis, and internal/external presentations
- Compiling, analyzing, and reporting on findings of non-compliance and providing recommendations for improvement
- Capturing and maintaining plans of action and milestones on findings of non-compliance
- Tracking and escalating unresolved non-compliance issues and corrective and preventative action plans to closure
- Validating cyber security tests and assessments are conducted in accordance with established policies and procedures
- Formally and informally presents information in group and individual settings
- Performs other job-related duties as assigned
- Bachelor's degree in Computer Science or related field, or 4 years of professional IT experience.
- 5+ years of related work experience.
- Familiarity with NIST SP 800-53, RMF, and security assessment tools.
- Proficiency in Microsoft Office Suite.
- Strong attention to detail, organizational skills, and initiative.
- Must achieve/maintain NICE Framework certification (e.g., CISSP, CISM) within 6 months.
- Must pass pre-employment qualifications of Cherokee Federal
Criterion is a part of Cherokee Federal - the division of tribally owned federal contracting companies owned by Cherokee Nation Businesses. As a trusted partner for more than 60 federal clients, Cherokee Federal LLCs are focused on building a brighter future, solving complex challenges, and serving the government's mission with compassion and heart. To learn more about Criterion , visit cherokee-federal.com.
#CherokeeFederal #LI
#LI-RA1
Cherokee Federal is a military friendly employer. Veterans and active military transitioning to civilian status are encouraged to apply.
Similar searchable job titles:
- Information Systems Security Officer (ISSO)
- Cybersecurity Compliance Analyst
- IT Security Risk and Compliance Specialist
- Information Assurance Analyst
- Cybersecurity Auditor
- Cybersecurity Compliance
- Risk Management Framework (RMF)
- NIST SP 800-53
- Information Assurance
- Security Assessments
Legal Disclaimer: Cherokee Federal is an equal opportunity employer. Please visit cherokee-federal.com/careers for information regarding our Affirmative Action and Equal Opportunity Employer Statement, and Accommodation request.
Many of our job openings require access to government buildings or military installations. Candidates must pass pre-employment qualifications of Cherokee Federal.
Be The First To Know
About the latest Security assessment Jobs in United States !
Assistant Director - Inbound Security Assessment & Auditor Response Specialist

Posted today
Job Viewed
Job Description
The exceptional EY experience. It's yours to build.
EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities.
Technology has always been at the heart of what we do and deliver at EY. We need technology to keep an organization the size of ours working efficiently. We have 300,000 people in more than 140 countries, all of whom rely on secure technology to be able to do their job every single day. Everything from the laptops we use, to the ability to work remotely on our mobile devices and connecting our people and our clients, to enabling hundreds of internal tools and external solutions delivered to our clients. Technology solutions are integrated in the client services we deliver and is key to us being more innovative as an organization.
**EY Technology** supports our technology needs through three business units:
**Client Technology (CT)** - focuses on developing new technology services for our clients. It enables EY to identify new technology-based opportunities faster and pursue those opportunities more rapidly.
**Enterprise Technology (ET)** - ET supports our Core Business Services functions and will deliver fit-for-purpose technology infrastructure at the cheapest possible cost for quality services. ET will also support our internal technology needs by focusing on a better user experience.
**Information Security (Info Sec)** - Info Sec prevents, detects, responds and mitigates cyber-risk, protecting EY and client data, and our information management systems.
**The opportunity**
The Client Assurance team within Information Security has an opportunity at an Assistant Director level within the United States to support EY client requests regarding information security and data protection.
The Client Assurance Assistant Director is responsible for supporting all client and regulatory inquiries and activities regarding EY's information security governance program within their geographic area. You'll be primarily responsible for assisting EY engagement teams in addressing client requests regarding the security of EY's traditional and cloud-based technology solutions used to deliver professional services to our clients. Additionally, you'll be responsible for assisting EY teams in engaging with our regulators by representing EY Information Security in the areas of information security governance and cybersecurity. You're likely to balance your time between multiple requests and responsibilities, supporting your team on challenging pursuits and engagements while learning about EY's leading-edge technologies.
This position requires excellent English language speaking, reading and writing abilities. This is not a hands-on technical role and no systems administration or design is involved.
**Your key responsibilities**
+ Experience responding to information security assessments and/or audits from external parties, auditors or regulators, or conduting information security risk assessments to suppliers.
+ Contribute to the development, implementation and maintenance of Client Security Assurance function.
+ Support client and engagement team security assessment inquiries regarding EY's Global Information Security Program.
+ Review and provide commentary regarding information security requirements in client contractual agreements to confirm compliance with EY information security standards. Participate in client discussions to negotiate contractual terms.
+ Identify opportunities and execute plans to improve client assurance processes and understand and quantify business impact of those improvements for communication to management.
+ Work independently with minimal oversight from management.
+ Minimal travel required.
**Skills and attributes for success**
Although this is not a client facing role, the successful candidate will have experience interfacing with external clients. Excellent communication and negotiation skills are key attributes in order to succeed in this position.
**To qualify for the role you must have**
+ Demonstrated experience responding to information security assessments and/or audits from external parties, auditors or regulators, or conduting information security risk assessments to suppliers.
+ Experience working with common information security standards, such as ISO 27001/27002, NIST, ITIL, COBIT
+ Understanding of security related regulatory and data privacy concerns globally
+ Knowledge of cloud security concepts and enterprise federation services
+ Experience translating information security concepts into business and technical language
+ Flexibility to adjust to multiple demands, shifting priorities, ambiguity, and rapid change
+ Fluency in reading, writing and speaking English
**Ideally, you'll also have a selection of the following**
+ An advanced degree in Computer Science, Information Systems, Engineering or a related major
+ Professional certifications such as CISSP, GIAC, CISM or CISA
+ Experience in financial services or other highly regulated industry
**What we look for**
+ An individual who communicates clearly and with self-confidence
+ Ability to understand and integrate cultural differences and work effectively in cross cultural teams
+ Demonstrated integrity and judgment within a professional environment
+ Outstanding management, interpersonal, communication, organizational, and decision-making skills
+ The demonstrated characteristics of a forward thinker and self-motivator who thrives on new challenges and adapts to learning new knowledge
**What we offer**
The compensation ranges below are provided in order to comply with United States pay transparency laws. Other geographies will follow their local salary guidelines, which may not be a direct conversion of published US salary ranges. We offer a comprehensive compensation and benefits package where you'll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job in all geographic locations in the US is $124,400 to $32,700 . The salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is 149,300 to 264,400 . Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options. Join us in our team-led and leader-enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year. Under our flexible vacation policy, you'll decide how much vacation time you need based on your own personal circumstances. You'll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
+ **Continuous learning:** You'll develop the mindset and skills to navigate whatever comes next.
+ **Success as defined by you:** We'll provide the tools and flexibility, so you can make a meaningful impact, your way.
+ **Transformative leadership:** We'll give you the insights, coaching and confidence to be the leader the world needs.
+ **Diverse and inclusive culture:** You'll be embraced for who you are and empowered to use your voice to help others find theirs.
EY accepts applications for this position on an on-going basis. **If you can demonstrate that you meet the criteria above, please contact us as soon as possible.**
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.
Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.
Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.
For those living in California, please click here ( for additional information.
EY is an equal opportunity, affirmative action employer providing equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.
EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY's Talent Shared Services Team (TSS) or email the TSS at
Assistant Director - Inbound Security Assessment & Auditor Response Specialist

Posted today
Job Viewed
Job Description
The exceptional EY experience. It's yours to build.
EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities.
Technology has always been at the heart of what we do and deliver at EY. We need technology to keep an organization the size of ours working efficiently. We have 300,000 people in more than 140 countries, all of whom rely on secure technology to be able to do their job every single day. Everything from the laptops we use, to the ability to work remotely on our mobile devices and connecting our people and our clients, to enabling hundreds of internal tools and external solutions delivered to our clients. Technology solutions are integrated in the client services we deliver and is key to us being more innovative as an organization.
**EY Technology** supports our technology needs through three business units:
**Client Technology (CT)** - focuses on developing new technology services for our clients. It enables EY to identify new technology-based opportunities faster and pursue those opportunities more rapidly.
**Enterprise Technology (ET)** - ET supports our Core Business Services functions and will deliver fit-for-purpose technology infrastructure at the cheapest possible cost for quality services. ET will also support our internal technology needs by focusing on a better user experience.
**Information Security (Info Sec)** - Info Sec prevents, detects, responds and mitigates cyber-risk, protecting EY and client data, and our information management systems.
**The opportunity**
The Client Assurance team within Information Security has an opportunity at an Assistant Director level within the United States to support EY client requests regarding information security and data protection.
The Client Assurance Assistant Director is responsible for supporting all client and regulatory inquiries and activities regarding EY's information security governance program within their geographic area. You'll be primarily responsible for assisting EY engagement teams in addressing client requests regarding the security of EY's traditional and cloud-based technology solutions used to deliver professional services to our clients. Additionally, you'll be responsible for assisting EY teams in engaging with our regulators by representing EY Information Security in the areas of information security governance and cybersecurity. You're likely to balance your time between multiple requests and responsibilities, supporting your team on challenging pursuits and engagements while learning about EY's leading-edge technologies.
This position requires excellent English language speaking, reading and writing abilities. This is not a hands-on technical role and no systems administration or design is involved.
**Your key responsibilities**
+ Experience responding to information security assessments and/or audits from external parties, auditors or regulators, or conduting information security risk assessments to suppliers.
+ Contribute to the development, implementation and maintenance of Client Security Assurance function.
+ Support client and engagement team security assessment inquiries regarding EY's Global Information Security Program.
+ Review and provide commentary regarding information security requirements in client contractual agreements to confirm compliance with EY information security standards. Participate in client discussions to negotiate contractual terms.
+ Identify opportunities and execute plans to improve client assurance processes and understand and quantify business impact of those improvements for communication to management.
+ Work independently with minimal oversight from management.
+ Minimal travel required.
**Skills and attributes for success**
Although this is not a client facing role, the successful candidate will have experience interfacing with external clients. Excellent communication and negotiation skills are key attributes in order to succeed in this position.
**To qualify for the role you must have**
+ Demonstrated experience responding to information security assessments and/or audits from external parties, auditors or regulators, or conduting information security risk assessments to suppliers.
+ Experience working with common information security standards, such as ISO 27001/27002, NIST, ITIL, COBIT
+ Understanding of security related regulatory and data privacy concerns globally
+ Knowledge of cloud security concepts and enterprise federation services
+ Experience translating information security concepts into business and technical language
+ Flexibility to adjust to multiple demands, shifting priorities, ambiguity, and rapid change
+ Fluency in reading, writing and speaking English
**Ideally, you'll also have a selection of the following**
+ An advanced degree in Computer Science, Information Systems, Engineering or a related major
+ Professional certifications such as CISSP, GIAC, CISM or CISA
+ Experience in financial services or other highly regulated industry
**What we look for**
+ An individual who communicates clearly and with self-confidence
+ Ability to understand and integrate cultural differences and work effectively in cross cultural teams
+ Demonstrated integrity and judgment within a professional environment
+ Outstanding management, interpersonal, communication, organizational, and decision-making skills
+ The demonstrated characteristics of a forward thinker and self-motivator who thrives on new challenges and adapts to learning new knowledge
**What we offer**
The compensation ranges below are provided in order to comply with United States pay transparency laws. Other geographies will follow their local salary guidelines, which may not be a direct conversion of published US salary ranges. We offer a comprehensive compensation and benefits package where you'll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job in all geographic locations in the US is $124,400 to $32,700 . The salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is 149,300 to 264,400 . Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options. Join us in our team-led and leader-enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year. Under our flexible vacation policy, you'll decide how much vacation time you need based on your own personal circumstances. You'll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
+ **Continuous learning:** You'll develop the mindset and skills to navigate whatever comes next.
+ **Success as defined by you:** We'll provide the tools and flexibility, so you can make a meaningful impact, your way.
+ **Transformative leadership:** We'll give you the insights, coaching and confidence to be the leader the world needs.
+ **Diverse and inclusive culture:** You'll be embraced for who you are and empowered to use your voice to help others find theirs.
EY accepts applications for this position on an on-going basis. **If you can demonstrate that you meet the criteria above, please contact us as soon as possible.**
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.
Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.
Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.
For those living in California, please click here ( for additional information.
EY is an equal opportunity, affirmative action employer providing equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.
EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY's Talent Shared Services Team (TSS) or email the TSS at
Assistant Director - Inbound Security Assessment & Auditor Response Specialist

Posted 2 days ago
Job Viewed
Job Description
The exceptional EY experience. It's yours to build.
EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities.
Technology has always been at the heart of what we do and deliver at EY. We need technology to keep an organization the size of ours working efficiently. We have 300,000 people in more than 140 countries, all of whom rely on secure technology to be able to do their job every single day. Everything from the laptops we use, to the ability to work remotely on our mobile devices and connecting our people and our clients, to enabling hundreds of internal tools and external solutions delivered to our clients. Technology solutions are integrated in the client services we deliver and is key to us being more innovative as an organization.
**EY Technology** supports our technology needs through three business units:
**Client Technology (CT)** - focuses on developing new technology services for our clients. It enables EY to identify new technology-based opportunities faster and pursue those opportunities more rapidly.
**Enterprise Technology (ET)** - ET supports our Core Business Services functions and will deliver fit-for-purpose technology infrastructure at the cheapest possible cost for quality services. ET will also support our internal technology needs by focusing on a better user experience.
**Information Security (Info Sec)** - Info Sec prevents, detects, responds and mitigates cyber-risk, protecting EY and client data, and our information management systems.
**The opportunity**
The Client Assurance team within Information Security has an opportunity at an Assistant Director level within the United States to support EY client requests regarding information security and data protection.
The Client Assurance Assistant Director is responsible for supporting all client and regulatory inquiries and activities regarding EY's information security governance program within their geographic area. You'll be primarily responsible for assisting EY engagement teams in addressing client requests regarding the security of EY's traditional and cloud-based technology solutions used to deliver professional services to our clients. Additionally, you'll be responsible for assisting EY teams in engaging with our regulators by representing EY Information Security in the areas of information security governance and cybersecurity. You're likely to balance your time between multiple requests and responsibilities, supporting your team on challenging pursuits and engagements while learning about EY's leading-edge technologies.
This position requires excellent English language speaking, reading and writing abilities. This is not a hands-on technical role and no systems administration or design is involved.
**Your key responsibilities**
+ Experience responding to information security assessments and/or audits from external parties, auditors or regulators, or conduting information security risk assessments to suppliers.
+ Contribute to the development, implementation and maintenance of Client Security Assurance function.
+ Support client and engagement team security assessment inquiries regarding EY's Global Information Security Program.
+ Review and provide commentary regarding information security requirements in client contractual agreements to confirm compliance with EY information security standards. Participate in client discussions to negotiate contractual terms.
+ Identify opportunities and execute plans to improve client assurance processes and understand and quantify business impact of those improvements for communication to management.
+ Work independently with minimal oversight from management.
+ Minimal travel required.
**Skills and attributes for success**
Although this is not a client facing role, the successful candidate will have experience interfacing with external clients. Excellent communication and negotiation skills are key attributes in order to succeed in this position.
**To qualify for the role you must have**
+ Demonstrated experience responding to information security assessments and/or audits from external parties, auditors or regulators, or conduting information security risk assessments to suppliers.
+ Experience working with common information security standards, such as ISO 27001/27002, NIST, ITIL, COBIT
+ Understanding of security related regulatory and data privacy concerns globally
+ Knowledge of cloud security concepts and enterprise federation services
+ Experience translating information security concepts into business and technical language
+ Flexibility to adjust to multiple demands, shifting priorities, ambiguity, and rapid change
+ Fluency in reading, writing and speaking English
**Ideally, you'll also have a selection of the following**
+ An advanced degree in Computer Science, Information Systems, Engineering or a related major
+ Professional certifications such as CISSP, GIAC, CISM or CISA
+ Experience in financial services or other highly regulated industry
**What we look for**
+ An individual who communicates clearly and with self-confidence
+ Ability to understand and integrate cultural differences and work effectively in cross cultural teams
+ Demonstrated integrity and judgment within a professional environment
+ Outstanding management, interpersonal, communication, organizational, and decision-making skills
+ The demonstrated characteristics of a forward thinker and self-motivator who thrives on new challenges and adapts to learning new knowledge
**What we offer**
The compensation ranges below are provided in order to comply with United States pay transparency laws. Other geographies will follow their local salary guidelines, which may not be a direct conversion of published US salary ranges. We offer a comprehensive compensation and benefits package where you'll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job in all geographic locations in the US is $124,400 to $32,700 . The salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is 149,300 to 264,400 . Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options. Join us in our team-led and leader-enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year. Under our flexible vacation policy, you'll decide how much vacation time you need based on your own personal circumstances. You'll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
+ **Continuous learning:** You'll develop the mindset and skills to navigate whatever comes next.
+ **Success as defined by you:** We'll provide the tools and flexibility, so you can make a meaningful impact, your way.
+ **Transformative leadership:** We'll give you the insights, coaching and confidence to be the leader the world needs.
+ **Diverse and inclusive culture:** You'll be embraced for who you are and empowered to use your voice to help others find theirs.
EY accepts applications for this position on an on-going basis. **If you can demonstrate that you meet the criteria above, please contact us as soon as possible.**
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.
Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.
Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.
For those living in California, please click here ( for additional information.
EY is an equal opportunity, affirmative action employer providing equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.
EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY's Talent Shared Services Team (TSS) or email the TSS at