EY (Ernst & Young) is a global leader in assurance, tax, consulting, and strategy and transactions services. As one of the "Big Four" professional services firms, it operates a vast network of member firms across more than 150 countries, employing nearly 400,000 professionals worldwide to help clients navigate complex regulatory and business challenges.

In Spain, EY maintains a significant footprint with a major headquarters in Madrid and a strong presence in Barcelona and other regional hubs. The firm is a major recruiter of international talent, offering diverse opportunities in digital transformation, financial services, and sustainability, often within multicultural teams where English is a primary working language.

EY was formed in 1989 through the merger of Ernst & Whinney and Arthur Young & Co. Its roots date back to the 19th century with founders Arthur Young and Alwin C. Ernst, who established their respective firms in the US and UK.

For international professionals

EY Spain frequently hires international profiles for its Global Delivery Services and specialized consulting arms.
The company provides a structured career development framework and extensive internal training programs.
Many roles in technology and consulting hubs allow for hybrid work arrangements.
The firm has a dedicated International Mobility program to facilitate internal transfers and relocations.
Offices are located in major Spanish business hubs, offering flexibility in geographic placement.

Senior Technology Risk Consultant

This job was originally posted in Spanish and automatically translated to English. You'll most likely need Spanish to apply.

Job Description

At EY, we shape the future with confidence.
Here you will find more than a job: an opportunity to grow, learn, and leave a mark.

Join our 7,000 professionals in Spain across 15 offices and a global network of 400,000 people working every day to transform businesses and societies.

#ShapeTheFutureWithConfidence | #EYCareers | #BuildingABetterWorkingWorld

The Opportunity

At EY, we are a leading global firm in audit, consulting, strategy and transactions, and legal and tax services.
We are driven by innovation, technology, and the purpose of generating a lasting positive impact.

Currently, we are looking to incorporate a Senior Technology Risk Consultant into our team with at least 3 years of experience in the area of technological risks to carry out Governance, Risk and Compliance (GRC) projects and services.

Responsibilities:

Provision of services related to technology risk management:

IT/OT and TPRM risk analysis.
Review and adaptation of regulations, norms, and best practices for IT/OT management, Artificial Intelligence, privacy, continuity/resilience (ISO27001, ISO 42001, ISO 22301, GDPR, ENS, etc.).
Audits and evaluations of technological internal control and TPRM.
Consulting and advisory on compliance, governance, and risk for emerging technologies (Cloud, AI, 5G, etc.).
Development of technology risk management procedures and policies and IT/OT internal control.
Management of technology risk projects (requirement gathering, needs analysis, and definition/implementation of control frameworks).
Experience in advisory under IT SOX requirements, testing of IT General Controls (ITGCs) and Application Controls (ITACs) and segregation of duties.
Preparation of periodic reports on the services provided.
Research on trends in technology risks and emerging technologies.

Requirements:

Degree/Bachelor's in Telecommunications or Computer Engineering.
English: Advanced.
3 years of experience performing the described functions in projects and environments at an international level.
Analytical.
Proactive.
Business vision.
Results-oriented.
Eagerness to learn and ability to work in a team.

What do we offer you?

Well-being and personal benefits

Wellbeing HUB: includes policies and actions for physical (Wellhub) and mental health.
Life and Accident Insurance.
Bankinter Office with special conditions.
EY Flex Flexible Compensation Plan (transport, training, restaurant card, childcare...).

Flexibility and work-life balance

Hybrid work and flexibility depending on the project.

Professional Development

Continuous training through EY University, with an individualized training itinerary.
Career plan to boost annual growth within the firm.
Personalized support: you will have the support of a Buddy and a Counselor throughout your trajectory.

Culture and work environment

Work in a dynamic and collaborative environment.
Opportunity to collaborate with global and multidisciplinary teams.
Expansion of your professional network in a diverse and enriching context.

Social Commitment

Social impact actions through the EY Foundation.

#LI-HYBRID

View original advert (Spanish)

En EY, damos forma al futuro con confianza.
Aquí encontrarás más que un trabajo: una oportunidad para crecer, aprender y dejar huella.

Únete a nuestros 7.000 profesionales en España y 15 oficinas y a una red global de 400.000 personas que trabajan cada día para transformar negocios y sociedades.

#ShapeTheFutureWithConfidence | #EYCareers | #BuildingABetterWorkingWorld

La oportunidad

En EY, somos una firma global líder en auditoría, consultoría, estrategia y transacciones y servicios legales y fiscales.
Nos impulsa la innovación, la tecnología y el propósito de generar un impacto positivo duradero.

En la actualidad, buscamos incorporar en nuestro equipo a un Consultor/a Senior Technology Risk con experiencia de, al menos, 3 años en el área de riesgos tecnológicos para la realización de proyectos y servicios de Governance, Risk and Compliance (GRC).

Funciones:

Prestación de servicios relacionados con la gestión de riesgos tecnológicos:

Análisis de riesgos de IT/OT y TPRM.
Revisión y adecuación de normativas, regulaciones y buenas prácticas de gestión IT/OT, Inteligencia Artificial, privacidad, continuidad/resiliencia (ISO27001, ISO 42001, ISO 22301, GDPR, ENS, etc.).
Auditorías y evaluaciones de control interno tecnológico y TPRM.
Consultoría y asesoramiento en materia de cumplimiento, gobierno y riesgo para tecnologías emergentes (Cloud, IA, 5G, etc.).
Desarrollo de procedimientos y políticas de gestión de riegos tecnológicos y control interno IT/OT.
Gestión de proyectos relativos a riesgos tecnológicos (toma de requerimientos, análisis de necesidades y definición/implantación de marcos de control).
Experiencia en asesoramiento bajo requerimientos SOX de IT, testeo de controles generales IT (ITGCs) y de controles de aplicación (ITACs) y segregación de funciones.
Elaboración de informes periódicos sobre el servicio prestado.
Investigación de tendencias en materia de riesgos tecnológicos y tecnológicas emergentes.

Requisitos:

Grado/Licenciatura en ingeniería de telecomunicaciones o informática.
Inglés: Avanzado.
Experiencia de 3 años desarrollando las funciones descritas en proyectos y entornos a nivel internacional.
Analítico.
Proactivo.
Visión de negocio.
Orientado a resultados.
Ganas de aprender y capacidad para trabajar en equipo.

¿Qué te ofrecemos?

Bienestar y beneficios personales

Wellbeing HUB: incluye políticas y acciones para la salud física (Wellhub) y mental.
Seguro de Vida y Accidentes.
Oficina Bankinter con condiciones especiales.
Plan de Compensación Flexible EY Flex (transporte, formación, tarjeta restaurante, guardería...).

Flexibilidad y conciliación

Trabajo híbrido y flexibilidad según proyecto.

Desarollo profesional

Formación continua a través de EY University, con un itinerario formativo individualizado.
Plan de carrera para potenciar el crecimiento anual dentro de la firma.
Acompañamiento personalizado: contarás con el apoyo de un Buddy y un Counselor durante toda tu trayectoria.

Cultura y entorno de trabajo