Technology Risk (Senior) Consultant - Information Security and Critical Infrastructure | Technology Risk (Senior) Consultant - Informationssicherheit und kritische Infrastruktur (w/m/d)

EY GmbH & Co. KG WPG

Köln, Nordrhein-Westfalen, Deutschland
Published Jun 13, 2025

Job Summary

Join a dynamic Technology Risk Consulting team to support clients' digital transformation by applying expertise in technological risks and information security. This role involves designing and optimizing information security processes within IT governance, risk, and compliance frameworks. You will define and implement concepts for reviewing operational information security processes, analyze risks, and derive mitigation measures. A key part of the job is interpreting information security standards and preparing clients for certifications like SOC1, SOC2, ISO27001, NIST CSF, and C5, as well as assisting with regulatory compliance (e.g., KRITIS and/or EU NIS). This position is ideal for a proactive individual with a strong affinity for IT and information security, excellent problem-solving skills, and a desire to contribute to a collaborative, interdisciplinary, and multicultural environment.

Required Skills

Education

Completed degree in Computer Science, Business Informatics, Business Administration, or a degree with a minor in IT, Information Security, or Digital Law

Experience

  • Professional experience in information security or technology risk consulting

Languages

German (Fluent)English (Fluent)

Additional

  • Not specified