Policy and Standards Analyst - Enterprise Technology Risk & Compliance

About the role

EY's Enterprise Technology Risk & Compliance (ETRC) team is hiring a Policy and Standards Analyst (Supervising Associate level) in Buenos Aires. The role supports the policy and standards governance and enablement capability, reporting to the Policy & Standards Enablement Lead. It helps maintain ET policies, standards and guidance, aligns them with enterprise requirements and coordinates communications, education, adoption and compliance monitoring across the technology landscape.

Key responsibilities

• Support the day-to-day execution of technology policy, standards and compliance enablement under the direction of the Policy & Standards Enablement Lead.
• Support the ET policy and standards governance process, including document maintenance, review cycles, approvals, publication and governance reporting.
• Coordinate with Information Security, Risk Management, Legal, Privacy and Service Quality Management stakeholders to align ET policies and standards with enterprise requirements.
• Research and summarize emerging regulatory, compliance and risk requirements, and support the development of technology guidance, standards and implementation materials.
• Develop and coordinate policy communications, education, awareness and adoption activities across ET.
• Respond to stakeholder questions and support the Lead in giving guidance on policy interpretation, standards implementation and compliance obligations.
• Work with ET Risk & Controls Governance and ET Assurance & Compliance teams to map policies and standards to relevant controls and compliance activities.
• Support policy and standards enablement for strategic initiatives, including AI-related programs, emerging technology adoption and enterprise transformation.
• Maintain implementation and compliance trackers, identify gaps and trends, and support follow-up, escalation and continuous improvement.

Required profile

• Bachelor's degree in Information Technology, Business, Risk Management, Cybersecurity or a related discipline, or equivalent experience.
• Minimum 5 years of experience in technology governance, compliance, risk management, information security, audit, policy management or a related field.
• Experience developing, maintaining or implementing policies, standards, procedures or governance frameworks.
• Experience coordinating activities across technology, information security, privacy, legal, risk management or audit stakeholders.
• Strong organizational, analytical and communication skills, with attention to detail.

Required skills

• Proficiency with Microsoft 365, SharePoint, Power BI and collaboration platforms.
• Experience with policy enablement, regulatory change, AI governance, privacy, cybersecurity or enterprise risk management is a plus.
• Certifications such as CRISC, CISA, CISM or PMP are a plus.