SaT-IDD-Cyber DD-Manager
Pune, MH, IN, 411014
EY
Mit unseren vier integrierten Geschäftsbereichen — Wirtschaftsprüfung und prüfungsnahe Dienstleistungen, Steuerberatung, Unternehmensberatung und Strategy and Transactions — sowie unserem Branchenwissen unterstützen wir unsere Mandanten dabei,...At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.
GDS SaT – EYP IDD IT – Cyber - Manager – India
Competitive business today is all about making intelligent, informed decisions. As a Manager within EY GDS SaT you will help make that happen. You will be an important part of our diversely talented, highly experienced Cyber team and work at the forefront of high-profile transactions. The cyber team is part of the Integrated due diligence (IDD) team which is a competency within SaT EYP. GDS EYP IDD has a market-leading proposition to create and maximize value for our clients, whether they are acquiring or divesting assets, or undertaking operational restructuring.
The opportunity
Cyber team of EYP IDD competency works on the most complex and high-profile global transactions, across a broad portfolio of clients and industry sectors. We are a group of experienced cyber professionals bringing deep sector and functional knowledge to our clients. As a team, we provide variety of cyber services to our clients helping them with during the transaction life cycle i.e. Predeal, sign to close and post deal stages of any transaction. We offer services like Cyber due diligence, Cyber security (Maturity) assessment, Cyber Red flag assessment, Cyber PMO support for Buy & Integrate / Sell & Separate projects, Target operating model (ToM), etc. We prepare and execute separation and integration plans, identify ideas and sources of value enhancement, as well as advise on risk mitigation.
Your key responsibilities
- As a Manager of Integrated due diligence function, you will be a vital member of the team supporting global EY practice teams to sell, manage and execute Cybersecurity focused projects.
- Lead client conversations and meetings, guide and mentor junior team members, understand the business requirements in transactions space and develop new cyber services to support the growth of cyber team.
- Part of your role will also involve developing experience across a range of different type of engagements, including pre-deal (e.g. Cyber due diligence, remediation cost estimates, Security spend benchmarking) and post-deal (e.g. integration / separation planning, Day 1 readiness, TSA support, project tracking etc). Having a commercial mind-set is key to this consulting-based role.
- Conduct security assessments, identify gaps and red flags assessing client’s on prem / cloud hosted applications, data and infrastructure
- Conduct research on deep and dark web using various open-source intelligence (OSINT) tools to reveal potential data breaches, provide recommendations and roadmap to mitigate the security gaps.
- Develop assessment reports, target operating models, target state security strategy, security roadmaps, data privacy and protection assessment reports, Day one readiness plans, 100 days plan, benchmarking analysis from security costing perspectives.
- You will be exclusively focused on supporting transactions from a Cybersecurity perspective pre and post deal working primarily with Private Equity and Corporate clients executing deal mandates.
- You will be a vital member of the team advising clients across all industries and sectors. Supporting key decision makers in developing and executing strategies for transactions. You will work in a transaction environment operating under tight M&A timeframes and demands.
- Develop strong relationships with regional EYP practice teams and establish yourself as a trusted point of contact.
- You will also assist in aspects of business origination, including pitches and presentations, and attending meetings with clients to generate new business opportunities.
- Demonstrate strong knowledge in the Information and Cyber security and Data privacy area. Should be able to translate Cyber and data privacy risks in business language for business leaders at client side.
- Experience on strategic consulting engagements developing detailed, compelling and analytical PowerPoint/Word/Excel/Visio deliverables to convey complex thoughts and ideas.
Skills and attributes for success
- Experience in a range of different type of engagements, including pre-deal (e.g. operational Cyber due diligence, carve-out planning), post-deal (e.g. integration planning, tracking) and restructuring (e.g. rapid cost reduction).
- Lead work-streams comprising members of the client and colleagues from our transactions and advisory practices.
- Lead meetings with senior client stakeholders to advise, shape and drive the strategy and planning for pre-deal diligence, integration, carve-out / separation and operational restructuring.
- Contribute to our practice development initiatives, supporting the continued focus on our team as a great place to work.
- Have innovative mindset to think out of the box for development of new services as per client needs
- Act as a role model and support development of junior team members, coupled with the recruitment and training responsibilities.
- Be flexible to support for broader IT, Cyber & Operational transaction work.
- Willingness to undertake international travel as per business requirement
To qualify for the role, you must have
- 10-14 years with technical experience in information and cybersecurity management, security testing, privacy and data protection, IT Audits etc
- B Tech / M. Tech. / MCA/MBA /PGDM (part time / full time) from a reputed institute with a technology background.
- Excellent presentation and analytical skills to produce quality presentations for client executives.
- A leading cybersecurity qualification, such as CISSP, CISA, CCSP, CISM or ISO 27001 ISMS.
- Well versed with cybersecurity and privacy requirements as defined in GDPR & CCPA.
- Practical exposure to security framework and standards such as PCI, NIST & CIS, ISO 27001.
- Good understanding about cloud security risks and controls.
- Hands-on experience with internal/external security audits assessment and readiness around SOC 1, SOC 2 or SOX controls.
- In-depth knowledge on various security platforms and technologies such as DLP, Firewalls, Vulnerability Scanning, Penetration Testing & Security Incident Response.
Ideally, you’ll also have
- Project management skills
- Strong communication and presentation skills with proven experience of producing high quality reports, papers, presentations and thought leadership
- Program and project management expertise with demonstrable experience in managing and being responsible for the delivery of successful cyber programs •
What we offer
EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across six locations – Argentina, China, India, the Philippines, Poland and the UK – and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. We’ll introduce you to an ever-expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.
- Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
- Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
- Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
- Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.
EY | Building a better working world
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.
Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.
Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Audits CCPA CCSP CISA CISM CISSP Cloud Firewalls GDPR Incident response ISMS ISO 27001 NIST OSINT Pentesting Privacy Security assessment Security strategy SOC SOC 1 SOC 2 SOX Strategy
Perks/benefits: Career development Equity / stock options Flex hours
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.