EY - Corporate Security Manager - Information Security

Your key responsibilities :

• Oversee corporate security operations, ensuring compliance with state and local laws also coordinate with law enforcement agencies, regulatory bodies, and intelligence partners to mitigate security risks.
• Manage the threat intelligence review process, analyzing cybersecurity threats, unauthorized access attempts and network vulnerabilities. Develop and implement intrusion detection mechanisms to strengthen security posture.
• Conduct security incident investigations, including theft, burglary, intrusion and policy violations. Analyze system logs, review network access controls (e.g., firewalls, intrusion detection systems) and collaborate with Human Resources and law enforcement agencies for resolution.
• Hire, train and oversee security personnel, including contract guard services. Implement training programs covering access control protocols, surveillance systems, cybersecurity policies and emergency response procedures.
• Oversee IT security architecture, including firewalls, VPNs and endpoint protection systems, ensuring seamless integration with physical security measures such as biometric access control, CCTV surveillance and intrusion detection systems.
• Direct security strategy for corporate events, critical infrastructure and office expansions, ensuring compliance with industry standards (e.g., ISO 27001, NIST, GDPR). Optimize disaster recovery strategies and business continuity planning.
• Conduct security audits and risk assessments, leveraging data analytics tools and SIEM (Security Information and Event Management) solutions to detect anomalies. Identify and mitigate single points of failure in security operations.
• Manage security clearances for employees, contractors and visitors, enforcing multi-factor authentication (MFA), role-based access control (RBAC), and secure credentialing procedures.
• Develop and implement corporate security policies, cyber hygiene protocols, and incident response frameworks. Maintain detailed security reports, intrusion logs and compliance documentation to ensure regulatory alignment.
• Conduct security awareness training, penetration testing exercises and security drills to educate employees on cybersecurity best practices, phishing attack mitigation and physical security response protocols.

To qualify for the role, you must have :

(ref : hirist.tech)