IN-MENA Regional Client Security Assurance Lead – EY Careers (Bengaluru, India)

Job Description

Summary

EY (Ernst & Young), a global leader in professional services, is hiring for the IN-MENA Regional Client Security Assurance Lead (Associate Director) role based in Bengaluru, India (with flexibility for other locations in the country). This position is a senior leadership opportunity in EY’s Client Security Assurance team, responsible for managing information security assessments, client due diligence, regulatory inquiries, and risk management across the IN/MENA region.

The role demands deep expertise in IT security compliance, governance, risk management, cloud security, and stakeholder engagement while working with leading global clients in highly regulated industries. With over 15–19 years of progressive IT security leadership experience, the selected professional will play a vital role in building client trust, enabling business growth, and strengthening EY’s global security posture.

If you’re an accomplished Information Security leader with CISSP, CISM, CISA, or ISO27001 certifications, and you’re looking for a high-impact role in one of the world’s top consulting firms, this is your chance to apply your expertise at EY India.

Job Details at a Glance

Key Responsibilities

As Regional Client Security Assurance Lead at EY, you will:

• Lead and Manage: Head a regional team for IN/MENA security assurance, fostering career growth and ensuring alignment with EY’s security objectives.
• Client Security Management: Act as a trusted client security advisor, managing relationships throughout the engagement lifecycle.
• Security Assessments: Oversee client and regulatory security assessments, ensuring transparency, compliance, and governance.
• RFP & Business Support: Assist client engagement teams during RFP processes by addressing security inquiries to secure new business.
• Regulatory Engagement: Represent EY in regulatory inquiries, highlighting compliance with GDPR, ISO 27001, SOC reports, NIST, and COBIT standards.
• Contractual Compliance: Review information security requirements in client contracts, ensuring alignment with EY’s global standards.
• Stakeholder Collaboration: Work with cross-functional teams including Information Security, Legal, Risk Management, Data Protection, and Client Teams.
• Continuous Improvement: Drive evolution of the Client Security Assurance framework, integrating innovations and best practices in cybersecurity.

Required Skills & Qualifications

• Experience: 15–19 years in IT security compliance, governance, or risk management, preferably in consulting, cloud-based, or regulated industries.
• Education: Bachelor’s degree required; advanced degrees preferred.
• Technical Expertise:
  • Cloud security (IaaS, PaaS, SaaS, Shared Responsibility)
  • Multitier network architecture (on-prem & cloud)
  • Application security, IAM, encryption standards, endpoint security
  • Incident response, disaster recovery, and business impact analysis
• Soft Skills: Strong executive presence, client-facing expertise, negotiation, and stakeholder management.
• Certifications (Preferred): CISSP, CISM, CISA, ISO27001 Auditor, CRISC, CIPP.
• Industry Knowledge: Deep understanding of compliance frameworks (GDPR, SOC1/2/3, ISO27001, COBIT, NIST).

Why Join EY?

• Be part of one of the world’s leading consulting firms with 300,000+ professionals globally.
• Opportunity to lead high-impact projects across multiple regions.
• Access to cutting-edge cybersecurity and information security frameworks.
• Collaborative and inclusive work environment with a strong emphasis on learning and career growth.
• Competitive salary, benefits, and global exposure.

Apply Now

If you are an experienced Information Security leader with a proven track record in client security assurance and IT risk management, EY invites you to take the next step in your career.

👉 Apply directly on the official EY careers page here

Join EY and help build a better working world through security, trust, and innovation.