IT Environment Support Specialist - EY GDS

About the role

EY is looking for an IT Environment Support Specialist in its GDS practice in Buenos Aires. Working with the AMS Lead, the role leads end-to-end vulnerability management across enterprise systems, applications, databases and cloud environments, prioritizing and remediating vulnerabilities while supporting compliance with cybersecurity policies and regulatory requirements. It is a corporate IT, operational/support service management position built around the ITIL framework.

Key responsibilities

• Lead and coordinate vulnerability management activities together with the AMS Lead
• Analyse vulnerability scan results and prioritize vulnerabilities by risk, severity, exploitability and business impact
• Work with application, infrastructure, cloud, database teams and vendors to drive timely remediation
• Monitor remediation progress and ensure adherence to SLAs
• Prepare periodic vulnerability metrics, dashboards and executive reports
• Support internal and external audits with evidence of vulnerability management controls
• Ensure compliance with cybersecurity policies, standards and regulations, and coordinate exception management and risk acceptance
• Act as escalation point for critical and high-risk vulnerabilities, with 24/7 on-call support
• Establish AMS governance processes, SOPs and compliance guidelines, and liaise with EY ITSD, the AMS Lead, the TCS AMS team and the Infosec team

Required profile

• Degree in Computer Science or a business-related degree, or equivalent work experience
• 7+ years in a corporate IT environment
• 3+ years in an operational/support service management role under the ITIL framework
• 3+ years in security compliance and vulnerability remediation for infrastructure including web/app servers, database servers and cloud
• Preferred: professional services industry experience
• Fluent English and excellent English communication skills

Required skills

• Vulnerability management and cybersecurity principles
• CVE and CVSS scoring and risk assessment methodologies
• .NET applications, Microsoft Azure, SQL/Oracle databases
• Network security, cloud platforms and application security
• ITIL and ServiceNow
• Basic project management (scope, schedule, resources, costs)