IT Risk & Compliance Consultant

IT Risk & Compliance Consultant helping EY clients strengthen cybersecurity and regulatory compliance. Assessing controls, mapping frameworks and building audit-ready remediation plans.

Posted 9/4/2026full-timeKatowice • 🇵🇱 PolandMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in IT regulatory compliance frameworks, including ISO 27001, PCI DSS, and HIPAA, with a strong focus on risk assessment, control implementation, and audit readiness. Proficient in developing remediation roadmaps and collaborating with stakeholders to ensure compliance and cybersecurity maturity.

Highest-signal resume keywords

ISO 27001 ImplementationPCI DSS AssessmentHIPAA ComplianceCybersecurity Maturity AssessmentRisk Assessment

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

IT Regulatory ComplianceControl MappingRemediation Roadmap DevelopmentISMS ScopingAudit ReadinessData ProtectionGovernance FrameworksRisk-Based ControlsCybersecurity FrameworksCompliance Frameworks

Soft Skills

Analytical SkillsProblem-Solving SkillsCommunication SkillsDocumentation SkillsTask Prioritization

Tools & Technologies

NIST CSFCOBITITILGDPRDORANIS2

Certifications & Qualifications

ISO 27001ISO 27005ISO 31000

Industry Keywords

HealthcareFinancial ServicesPharmaE-CommerceTelecom

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Support design and review of IT regulatory and compliance frameworks across ISO 27001, NIST CSF, PCI DSS, HIPAA, HITRUST, GDPR, COBIT and ITIL
Perform cyber/IT maturity assessments, gap assessments and control mapping
Develop remediation roadmaps
Assist with ISO 27001 programs, including ISMS scoping, risk assessment, Statement of Applicability, control implementation and audit readiness
Support PCI DSS assessments, including cardholder data environment reviews, security controls and evidence preparation
Contribute to HIPAA/HITRUST and regulated-data compliance projects in healthcare and life sciences
Draft policies, standards, governance frameworks, RACI models and senior management reports
Identify control gaps and support remediation planning and execution
Collaborate with IT, security, compliance and business stakeholders to deliver audit-ready documentation
Deliver IT regulatory compliance, cybersecurity maturity and IT control framework services to global clients

Requirements

What you’ll need

3–5 years of relevant experience in IT risk, cybersecurity, compliance or assurance
A university degree in Information Technology, Computer Science, Cybersecurity or a related field
English working proficiency (B2 and above)
Working proficiency (B2 and above) in at least one additional language: French, German, Spanish, Dutch or Italian
Working experience in ISO 27001 implementation or audit, PCI DSS or payment security assessments, HIPAA/HITRUST or healthcare compliance, or IT regulatory compliance/external assurance engagements
Understanding of at least one of: ISO 27001/ISMS, NIST CSF or NIST 800-53, PCI DSS/payment security, GDPR/data protection, COBIT, ITIL, DORA, NIS2
Background in IT risk, cybersecurity, compliance, audit or advisory
Experience in at least one listed industry: banking, payments, financial services, healthcare, pharma, retail, e-commerce, energy, utilities, transport, telecom or critical infrastructure
At least one certification: ISO 27001, ISO 27005 or ISO 31000
Strong analytical and problem-solving skills
Ability to interpret regulatory requirements and translate them into risk-based controls
Strong communication and documentation skills
Ability to prioritize and execute tasks in a high-pressure environment

Benefits

Comp & perks

Continuous learning and career development opportunities
Tools and flexibility to make a meaningful impact
Coaching and leadership development
Diverse and inclusive culture
Collaboration with global EY teams on exciting projects
Opportunities to work with well-known global brands