Assistant Manager

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. 

GDS SaT – TSE IT – Cyber DD - Assistant Manager – India

The opportunity

We are looking for a cyber strategy professional to join our Strategy & Execution team as an Assistant Manager. The role combines practical cyber security, architecture and privacy expertise with transaction advisory experience. You will support private equity investors and corporate clients across Cyber Due Diligence, post-deal integration and separation, cybersecurity maturity assessments, and privacy assessments based on GDPR and other leading frameworks. Working with multidisciplinary teams, you will assess network security, identity and access management, security operations and other critical controls; translate technical findings into clear business and transaction implications; and help develop pragmatic recommendations, Day 1 priorities and implementation roadmaps. This is an opportunity to broaden your experience across the M&A lifecycle while building deeper capability in cyber strategy, transformation and execution.

Your key responsibilities

• Support global EY practice teams in planning, managing and delivering cybersecurity and privacy engagements across the M&A transaction lifecycle.
• Conduct buy-side, sell-side and red-flag Cyber Due Diligence to identify material risks, assess transaction implications and develop practical recommendations and remediation cost considerations.
• Support cyber workstreams for post-deal integration, carve-out and separation programmes, including Day 1 readiness, 100-day planning, transition-state requirements, TSA dependencies and execution tracking.
• Perform cybersecurity maturity assessments using recognised standards and frameworks; assess current and target states, identify gaps, benchmark capabilities and develop prioritised improvement roadmaps.
• Conduct privacy and data protection assessments against GDPR and other applicable regulations and leading frameworks, covering privacy governance, data lifecycle, third-party processing, cross-border transfers, data subject rights and breach management.
• Assess cybersecurity capabilities and controls across network security, identity and access management, privileged access management, security operations, vulnerability management, incident response, cloud security, endpoint security and data protection.
• Evaluate transaction-related dependencies and risks involving shared infrastructure, applications, identities, security tooling, data, third parties and transitional service arrangements.