Cyber risk consultant Vacatures

Over de vacature

Overview

In this role, you join EY's Cyber Risk Management team to help clients elevate their cybersecurity posture across four key areas: transformation, assessment, data protection/privacy, and vulnerability management. You will design and implement security strategies, assess maturity, and guide governance in diverse industries from EY's Amsterdam hub. You'll work with cross-functional teams to reduce risk and improve resilience, contributing to a global, trusted security practice.

Arbeidsvoorwaarden / Benefits

• competitive salary
• pension plan
• holiday allowance and annual bonus
• laptop and phone for work and personal use
• monthly internet allowance
• 29 vacation days with option to buy extra days

Verantwoordelijkheden

• Support Cyber Transformation by designing remediation plans and improving cyber security management processes
• Conduct Cyber Assessments to evaluate programs, technologies, and processes against standards and frameworks
• Advise on Data Protection & Privacy programs, with emphasis on GDPR compliance and privacy by design
• Develop and manage Vulnerability Management offerings, including risk assessment and remediation planning
• Collaborate with cross-functional teams at EY to deliver security solutions and drive client impact

Belangrijkste vereisten

• 2-5 years of related work experience

• Degree in a technical field with cybersecurity relevance (e.g., Computer Science/Business Information Technology) or equivalent

• Knowledge of cybersecurity frameworks and standards (ISO 27001/2, NIST CSF) and GDPR

• Willingness to travel Netherlands-based client engagements and valid driver's license

• Excellent written and verbal communication skills in Dutch and English

• Strong client services orientation and proactive engagement approach

• Flexible, responsible, and self-confident in client environments

• client-focused

• proactive

• strong communication

• Cybersecurity assessments and controls

• Security strategies and roadmaps

• Security policies, procedures and governance

Over de vacature

Overview

Senior Consultant in EY-Parthenon Cyber drives cyber due diligence for M&A across deal lifecycles, delivering data-backed insights to influence investment decisions. You will mentor team members and translate technical findings into financial implications for senior clients. You'll develop operating models for cybersecurity within transactions and ensure high-quality deliverables. This role sits at the intersection of strategy, cyber risk, and deal execution, offering a chance to shape client outcomes in a globally connected environment. You join a fast-growing team that blends strategy with deep cyber expertise to build value for clients.

Arbeidsvoorwaarden / Benefits

• Competitive salary
• Pension plan
• Holiday allowance and annual bonus
• 40-hour contract
• Hybrid working
• Wellbeing resources (OpenUp platform)

Verantwoordelijkheden

• Lead cybersecurity due diligence by combining external research with internal cybersecurity data to support investment/divestment decisions
• Perform commercial, cybersecurity and technical analyses and present outcomes to non-technical audiences
• Develop operating models for cybersecurity organizations at various transaction stages (Day 1, Day 30, Day 100+)
• Drive development of complete, error-free deliverables (data books, reports, blueprints, Day 1 plans, board packs, etc.)
• Support Engagement Leaders in identifying, scoping, and closing opportunities within current and new engagements

Belangrijkste vereisten

• Minimum three years of experience in IT and Cyber M&A consulting, cybersecurity assessments, or related cybersecurity fields (e.g., data privacy, security engineering, penetration testing, DevSecOps)

• Knowledge of cybersecurity standards/frameworks (ISO27001, NIST CSF, CIS Controls, Cyber Essentials, PCI-DSS) and data privacy regulations (GDPR, NIS2, CRA, DORA)

• High-level understanding of secure Software Development Lifecycle

• Experience advising senior stakeholders; transactions/M&A exposure preferred

• Cyber or privacy certifications (e.g., CISSP, CISM, CIPP/E, CIPM, CISA)

• Stakeholder management

• Ability to present to non-technical audiences

• Mentoring and teamwork

• ISO27001, NIST CSF, CIS Controls, PCI-DSS

• GDPR, NIS2, CRA, DORA privacy regulations

• Secure SDLC understanding

Over de vacature

Overview

In deze rol geef je leiding aan complex privacy-, AI- en risicomanagementtransformaties binnen EY's Cybersecurity-team. Je vertaalt Europese digitale wetgeving naar praktische governance, frameworks en processen die businessdrivers ondersteunen. Je werkt in multidisciplinaire teams en bouwt sterke klantrelaties, terwijl je consultants richting geeft en bijdraagt aan teamgroei. Je combineert juridisch en technisch inzicht met hands-on uitvoering om Responsible AI en privacy-initiatieven te sturen.

Arbeidsvoorwaarden / Benefits

• pensioen
• bonus op jaarbasis
• 34 vakantiedagen
• mobiliteitsbudget
• hybride werken
• trainingen en opleidingen

Verantwoordelijkheden

• Adviseer organisaties en leid transformaties op snijvlak privacy, AI, cybersecurity en risk management
• Bepaal impact van Europese wetgeving (AVG, EU AI Act, Data Act, Data Governance Act) en vertaal dit naar governance, processen en controles
• Ontwikkel en implementeer privacy- en AI-strategieën die voldoen aan regelgeving en business-doelen
• Ontwerp en implementeer een ge ntegreerd operating model tussen privacy, cyber, AI en risk
• Zet Responsible AI-frameworks en governance-structuren op ter bevordering van fairness, transparantie en accountability
• Vervul tijdelijk rollen zoals Program Lead Privacy & AI, FG of AI Governance Manager waar passend
• Leid consultants en senior consultants, bouw sterke klantrelaties en draag bij aan teamgroei
• Schakel tussen strategisch advies en hands-on implementatie bij complexe trajecten met deadlines

Belangrijkste vereisten

• Masterdiploma in relevante richting

• Minimaal vijf jaar ervaring met privacy- en/of AI-gerelateerde vraagstukken in complexe/gereguleerde omgevingen

• Aantoonbare kennis van AVG, EU AI Act, Data Act en Data Governance Act

• Ervaring met opzetten governance-structuren, operating models en compliance roadmaps

• Kennis van frameworks en best practices op het gebied van Responsible AI

• Vermogen om rapportages en analyses in Engels en Nederlands te presenteren voor verschillende stakeholders

• Effectieve communicatie van risico's en beveiligingsarchitecturen naar IT- en businessperspectieven

• Klantenrelatieopbouw en ervaring met het schrijven van proposals

• Relevante certificeringen zoals CIPP/E, CIPM, CIPT, AI Governance of ISO 27701 Lead Implementer

• Uitstekende beheersing van Nederlands en Engels

• Analytische en gestructureerde aanpak

• Resultaatgerichtheid

• Sterke stakeholder-communicatie

• Governance-frameworks en compliance roadmaps

• Operating models voor privacy, cyber en AI

• Responsible AI frameworks en governance