Job Description

EY GDS Poland NextGen Talent Internship - Junior Cybersecurity Risk and Compliance Consultant

Location: Katowice - 2 days in office / 3 days remote

Let us introduce you the job offer by EY GDS Poland – a member of the global integrated service delivery center network by EY.

The opportunity

You will work in multinational environment together with other top cybersecurity experts and you will be helping to deliver highest standards of projects to multiple customers in various sectors. You will help organizations strengthen their cybersecurity posture by contributing to risk assessments, compliance reviews, control mapping, policy analysis and cybersecurity governance activities.

Your key responsibilities

As a Junior Consultant, you’ll contribute to Cybersecurity Risk and Compliance client projects and internal projects. The role involves hands-on support in risk assessment, maturity assessment and control mapping and implementation initiatives.

Skills and attributes for success

• Strong analytical and problem-solving mindset
• Interest in cybersecurity, risk management and compliance
• Attention to detail and ability to work with documentation
• Good communication skills and ability to work in international teams
• Proactive attitude, eagerness to learn and willingness to stay on full-time after the internship

To qualify for the role, you must have

• Basic understanding of cybersecurity, information security or IT risk management concepts
• Understanding of cybersecurity governance, risk management and compliance (GRC) principles
• Familiarity with concepts such as policies, controls, risk assessments or compliance reviews
• Interest in cybersecurity frameworks and regulations such as ISO 27001, NIST, DORA, NIS2 or GDPR
• Ability to work both independently and as part of a cybersecurity project team
• Excellent command of English language

Ideally, you’ll also have

• First exposure to cybersecurity, IT audit, compliance, risk management or data protection activities
• Familiarity with Microsoft Office tools (Excel, PowerPoint, Word) and data analysis
• Additional European language skills (German, French, Spanish, etc.)
• Relevant certifications, courses or extracurricular cybersecurity activities

What we look for

We are looking for candidates who combine curiosity about cybersecurity with a structured, reliable and analytical approach. You do not need to be a technical security expert, but you should be motivated to understand how cybersecurity risks are managed, how controls are designed and assessed, and how organizations demonstrate compliance with legal, regulatory and industry requirements.