EY (Ernst & Young) is a global leader in assurance, tax, consulting, and strategy and transactions services. As one of the "Big Four" professional services firms, it operates a vast network of member firms across more than 150 countries, employing nearly 400,000 professionals worldwide to help clients navigate complex regulatory and business challenges.

In Spain, EY maintains a significant footprint with a major headquarters in Madrid and a strong presence in Barcelona and other regional hubs. The firm is a major recruiter of international talent, offering diverse opportunities in digital transformation, financial services, and sustainability, often within multicultural teams where English is a primary working language.

EY was formed in 1989 through the merger of Ernst & Whinney and Arthur Young & Co. Its roots date back to the 19th century with founders Arthur Young and Alwin C. Ernst, who established their respective firms in the US and UK.

For international professionals

EY Spain frequently hires international profiles for its Global Delivery Services and specialized consulting arms.
The company provides a structured career development framework and extensive internal training programs.
Many roles in technology and consulting hubs allow for hybrid work arrangements.
The firm has a dedicated International Mobility program to facilitate internal transfers and relocations.
Offices are located in major Spanish business hubs, offering flexibility in geographic placement.

Cybersecurity Consulting Internship - September 2026 Barcelona

This job was originally posted in Spanish and automatically translated to English.

Job Description

At EY, we shape the future with confidence.

At EY, you will find much more than a job: a real opportunity to grow, learn, and leave your mark at a leading global firm.

In Spain, we are nearly 7,000 professionals, present in 15 offices, and part of a global network of more than 400,000 people working every day with a common purpose: Building a Better Working World.

At EY, we drive careers with impact, structured development, and continuous learning.
We shape the future with confidence, through people and technology.

#ShapeTheFutureWithConfidence #EYCareers #BuildingABetterWorkingWorld

The Opportunity

EY is a leading global firm in audit, consulting, strategy and transactions, and legal and tax services, supporting public and private organizations in their most complex challenges.

At EY:

We bet on continuous innovation
We develop long-term talent within multidisciplinary teams
We drive careers with purpose and progression

Job Description

At EY Consulting, we have adapted to the nature of the sectors and the new needs of our clients, accompanying them in their digital transformation. We are innovative, agile, collaborative, and we align business strategy objectives with new technologies.

One of our pillars is to transform business through new technologies and innovation by attracting and captivating exceptional talent.

EY Consulting is divided into two main areas: Business Consulting and Technology Consulting. In Business Consulting, we carry out business strategy, process optimization, and change management projects. In Technology Consulting, we develop solutions linked to the areas of Big Data & Analytics, Cybersecurity, SAP, Business Process Automation (RPA, NLP...), Cloud environments, etc.

As part of the Cybersecurity department, you will have the opportunity to work in EY offices, providing support in risk management and compliance tasks for the Cybersecurity area. The selected candidate will act as a subject matter expert, identifying, analyzing, and evaluating different risks in cybersecurity, business continuity, privacy, etc. Additionally, you will participate in the risk monitoring and reporting phases, which requires working closely with different stakeholders.

Responsibilities

Provision of IT services related to information security:

Security risk analysis (technical, organizational, etc.).
Review and update of security norms and regulations.
Security incident management (Handling CERT alerts, among others).
Security audits (Compliance, user management, configurations, etc.).
Consulting and advisory on security and certifications CISA, CISM, CISSP, ISO 27001.

Consulting and advisory on GDPR.
Management of security projects at a technical and functional level.
Execution of organizational security projects, mainly relating to the review, definition, and implementation of processes (user management, change management, hardening processes, etc.).

Requirements

Education: Final year students of Computer Engineering, Telecommunications Engineering, Mathematical Engineering, Master's in Cybersecurity or similar.
Knowledge or desire to learn about: ISO 2700x, ISO 37500, ISO 22301, ISO 31000, NIST, Cloud Environments, GDPR, ICT SREP, PCI-DSS, LOPDGDD.
Ability to manage an internship agreement with your university. Minimum period: 6 months.
Full-time/Part-time
Start date: September 2026
Minimum English level B2
Interest in developing your career in the Cybersecurity area.
Good communication skills, teamwork, and a desire to learn.

What we offer

Practical training in a leading global professional services firm.
Guidance and mentoring from professionals in the Cybersecurity area.
Young, collaborative, and inclusive environment.
Possibility of professional development and continuity within EY after the internship.
Access to social impact initiatives, volunteering, sports, and wellness.
Exclusive benefits and discounts for being part of EY.

Are you ready to shape your future with confidence? Join us

View original advert (Spanish)

En EY, damos forma al futuro con confianza.

En EY encontrarás mucho más que un empleo: una oportunidad real para crecer, aprender y dejar huella en una firma global líder.

En España somos cerca de 7.000 profesionales, presentes en 15 oficinas, y formamos parte de una red global de más de 400.000 personas que trabajan cada día con un propósito común: Building a Better Working World.

En EY impulsamos carreras con impacto, desarrollo estructurado y aprendizaje continuo.
Damos forma al futuro con confianza, a través de las personas y la tecnología.

#ShapeTheFutureWithConfidence #EYCareers #BuildingABetterWorkingWorld

La oportunidad

EY es una firma global líder en auditoría, consultoría, estrategia y transacciones, y servicios legales y fiscales, que acompaña a organizaciones públicas y privadas en sus retos más complejos.

En EY:

Apostamos por la innovación continua
Desarrollamos talento a largo plazo dentro de equipos multidisciplinares
Impulsamos carreras con propósito y recorrido

Descripción del puesto

Desde EY Consulting nos hemos adaptado a la naturaleza de los sectores, a las nuevas necesidades que tienen nuestros clientes y los acompañamos en su transformación digital. Somos innovadores, ágiles, colaborativos y alineamos objetivos de estrategia de negocio con las nuevas tecnologías.

Uno de nuestros pilares es transformar el negocio a través de nuevas tecnologías e innovación atrayendo y cautivando el talento excepcional.

EY Consulting nos dividimos en dos grandes áreas: Business Consulting y Technology Consulting. Desde Business Consulting realizamos proyectos de estrategia de negocio, optimización de procesos y gestión del cambio. En Technology Consulting desarrollamos soluciones vinculadas a las áreas de Big Data & Analytics, Cyberseguridad, SAP, Automatización de procesos de negocio (RPA, NLP...), entorno Cloud, etc.

Como parte del departamento de Ciberseguridad tendrás la oportunidad de trabajar en las oficinas de EY, proporcionando apoyo en tareas de gestión de riesgo y cumplimiento del área de Ciberseguridad. El/la seleccionado/a actuará como experto/a en la materia, identificando, analizando y evaluando los diferentes riesgos en materia de ciberseguridad, continuidad de negocio, privacidad etc. Además, participarás en las fases de monitorización y reporte de los riesgos, lo que requiere trabajar estrechamente con los diferentes stakeholder.

Responsabilidades

Prestación de servicios IT relacionados con la seguridad de la información:

Análisis de riesgos de seguridad (técnicos, organizativos, etc.).
Revisión y actualización de normativas y regulaciones de seguridad.
Gestión de incidentes de seguridad (Atención a alertas del CERT, entre otros)
Auditorías de seguridad (Compliance, gestión de usuarios, configuraciones, etc.)
Consultoría y asesoramiento en materia de seguridad y certificaciones CISA, CISM, CISSP, ISO 27001.

Consultoría y asesoramiento en materia de GDPR.
Gestión de proyectos de seguridad a nivel técnico y funcional.
Ejecución de proyectos de seguridad organizativos, principalmente relativos a la revisión, definición e implantación de procesos (gestión de usuarios, gestión de cambios, procesos de bastionado, etc.).

Requisitos

Formación: Estudiantes de último curso de Ingeniería informática, Ingeniería de Telecomunicaciones, Ingeniería Matemática, Máster en Ciberseguridad o similares.
Conocimiento o ganas de aprender sobre: ISO 2700x, ISO 37500, ISO 22301, ISO 31000, NIST, Entornos Cloud. GDPR, ICT SREP, PCI-DSS, LOPDGDD
Posibilidad de poder gestionar convenio de prácticas con tu universidad. Período mínimo: 6 meses.
Jornada completa/media jornada
Incorporación: Septiembre 2026
Nivel de inglés mínimo B2
Interés por desarrollar tu carrera en el área de Ciberseguridad.
Buenas habilidades de comunicación, trabajo en equipo y ganas de aprender.

Qué ofrecemos

Formación práctica en una firma global líder en servicios profesionales.
Acompañamiento y mentoring por parte de profesionales del área de Ciberseguridad.
Ambiente joven, colaborativo e inclusivo.
Posibilidad de desarrollo profesional y continuidad dentro de EY tras la beca.
Acceso a iniciativas de impacto social, voluntariado, deporte y bienestar.
Beneficios y descuentos exclusivos por formar parte de EY.