Information Security Analyst – Associate/Senior Associate

About the role

Join EY's global Information Security team as an Associate or Senior Associate. You will help protect EY and client data by delivering security assurance, conducting assessments, and supporting the governance, risk, and compliance program.

Key responsibilities

• Perform application and network penetration testing and vulnerability identification.
• Conduct security audits and ensure compliance with frameworks such as HITRUST, SOC 1, and SOC 2.
• Provide security certification reviews for applications before production use.
• Support the Technology Assurance, Risk, and Policy (TARP) function in developing GRC strategies.
• Collaborate with internal and external stakeholders to deliver secure solutions and respond to security events.

Required profile

• Strong analytical mindset with a focus on protecting information assets.
• Ability to work independently and as part of a global security team.
• Excellent communication skills to convey technical findings to non‑technical audiences.

Required skills

• Penetration testing
• Vulnerability assessment
• Security audits
• HITRUST framework
• SOC 1 compliance
• SOC 2 compliance

What we offer

• Opportunities to work on high‑impact security projects for a leading professional services firm.
• Access to global resources, training, and a supportive inclusive culture.
• Career development pathways within EY’s worldwide network.