GeoSecurity Manager, Associate Director

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better. Join us and build an exceptional experience for yourself, and a better working world for all.   The exceptional EY experience. It's yours to build.   EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities.  

GeoMarket Security Manager (GSM), Associate Director

 

Must reside in the Pacific North, Pacific South or Gulf Coast

 

Job Summary:

EY Global Security promotes a safe and secure working environment at EY’s offices and client sites. The Region Security Manager will play a key role in driving the regional implementation of Global Security policies and guidance and will develop and mature key elements of core Global Security disciplines consistent with local threats and risks. This person will work with Region Leadership, Global Security and Global Risk Management subject matter experts on security and risk issues.

 

The Opportunity

The West GeoMarket Security Manager, GSM (West Region Security Manager RSM) will be responsible for collaborating within the Regional Managing Partner, Regional Risk Management Leader, EY’s Global Security team and with other functions to further strengthen EY’s internal and external security. To accomplish this, it will be important for this role to analyse the business environment, geographical variations, security requirements and stakeholder expectations.  Working with the Region Managing Partner, Region Risk Management Leader and Americas Security Director, Global Security, the role will entail involvement with, but not limited to, the following activities:

 

Planning and Policy

• To understand and assist in the implementation of EY’s Security Global Policy. This will include security operations, threat and risk monitoring, business resilience (crisis management, emergency preparedness and response planning, business continuity planning), physical security, insider threat, travel security, meeting & event Security, and executive protection.

 

Business Resilience (Crisis Management/Business Continuity) - Emergency response plan and procedures must be developed at office location level and must include at a minimum:

• Assigned crisis management team (CMT) and alternates, with agreed responsibilities
• Notification and escalation tool and procedures (including full implementation of EY’s mass notification tool)
• Published list of immediate and subsequent actions to manage an emergency
• Procedures for communicating in advance of, during, and after an emergency to EY people and families, clients, stakeholders, media
• Greater specificity of planning and strength of resilience, where there is elevated threat and/or risk exposure
• Coordination with landlord’s and local emergency responders’ plans
• Annual training and exercise to prepare the CMT to respond effectively to a crisis situation (including test of the mass notification tool, once implemented)
• Annual plan maintenance process to routinely update plans to reflect the changes in staffing and logistics

 

Business continuity plans and procedures must be developed on an office, country or Region level (as appropriate for the geographical size under consideration - scope of plans should be devised in coordination with Global Security) and must include at a minimum:

• Assigned Business Continuity Plan (BCP) management team, and alternates with agreed upon responsibilities
• Notification and escalation procedures
• Process for identifying critical functions and requirements through a business impact analysis
• Process for prioritizing clients and client service commitments/responsibilities
• Published list of immediate and subsequent actions to manage a business interruption
• Arrangements and recovery procedures to meet critical requirements in established timescales
• Development of and reference to or inclusion of the pandemic plan and any related infectious disease plan(s)
• Confirmation of business continuity plans in place, meeting EY’s recovery requirem