Senior Consultant - Cyber Risk Management

EYAmsterdamHybridFull-time15 Sept 2026

EY is seeking a Senior Consultant in Cyber Risk Management to join its Cyber Security Team in Amsterdam. The role involves advising clients on cybersecurity transformation, assessments, data protection, and vulnerability management. Candidates need 2-5 years of related experience, knowledge of security frameworks like ISO 27001 and NIST CSF, and fluency in Dutch and English.

What you'll do

Improve cybersecurity measurements and monitoring, and develop sustainable processes
Apply risk management principles to a cybersecurity environment and leverage cybersecurity frameworks/standards like ISO/IEC 27001:2013/Baseline Informatiebeveiliging Overheid (BIO), NIST CSF, etc.
Design solutions to remediate gaps or enhance maturity of specific cybersecurity capabilities
Implement or improve cyber security management strategy and processes at the clients’ organization
Assess cybersecurity programs and strategies, or specific technologies and/or information security processes using proprietary framework or industry standards
Focus on security and risk assessments of processes, applications, systems
Assist clients in understanding cyber threat landscape, assess the maturity of their cyber security strategy and/or assess compliance to regulations and standards
Assess and consult clients on data privacy, implementation of data protection / GDPR programs to address confidentiality and security over customer, employee or patient data
Gain insights into the design and operations of privacy programs and strategies in a variety of industries and learn how to design measurable programs to keep up with the ever changing regulatory landscape
Build a full service vulnerability management offering providing clients with tailored solutions to deploy and run vulnerability management programs
Manage vulnerabilities, associated risks and remediation within complex environments

What you need

Must-have

Cybersecurity assessmentsIT and cybersecurity policiesStandardsProcedures and controlsSecurity strategies and roadmapsCybersecurity awareness and trainingCybersecurity metrics and reportingCybersecurity organization design and implementation

Soft skills

Excellent written and verbal communication skillsStrong client services orientationProactiveFlexibleResponsibleSelf-confident

Cyber Risk ManagementConsultingCybersecurityProfessional ServicesSenior ConsultantAmsterdamFull-timeHybridISO 27001NIST CSF

/What you'll do

/What you need

Must-have

Soft skills

What you'll do

What you need