Risk Analyst - IT Risk Management (BCM)

About the role

EY's Information Security team protects data and information systems and works with a global team of almost 900 people. As a Business Impact Analysis and Continuity Analyst in the IT Risk Management (BCM) function, you will administer the creation, completion and management sign-off of IT Business Continuity Management and other risk documents, and keep them up to date and compliant with standards and policies.

Key responsibilities

• Create, maintain and manage the business continuity management framework, processes, tooling and strategy
• Administer the creation, completion and management sign-off of BCM and other risk documents
• Keep existing documents refreshed and signed off periodically to ensure compliance with standards and policies
• Work to existing policies and procedures, handling exceptions with the agreement of the BCM team leader
• Use precedents and procedures as a guide, reviewing them with management before final sign-off where needed

Required profile

• 2+ years of relevant experience in IT, Business Continuity, disaster recovery, IT risk management or similar roles
• Advanced degree in Computer Science, Information Security or a related discipline, or equivalent work experience
• Certification such as BCI (AMBCI or MBCI), CRISC, CISSP or CISM, or equivalent
• Ability to work independently with some supervision, balance multiple work streams and follow established policies

Required skills

• Exposure to risk management/BCM, preferably in a multinational environment
• Ideally: ISO 22301, ISO 27001, ISO 31000; cloud fundamentals (Azure, AWS); Power BI; RSA Archer
• Knowledge of local and regional regulatory requirements affecting IT policies

What we offer

• A globally diverse, coordinated team with opportunities to grow and develop
• Flexible working arrangements, including the option to work remotely
• An EY benefits package covering physical, emotional, financial and social well-being