ET SIC Reporting Analyst

ET SIC Reporting Analyst is responsible for supporting vulnerability management reporting for ET (excluding Platform Mgmt) and providing accurate, timely and actionable compliance insights.

This position requires close collaboration with global teams across ET, Infosec and business functions to align reporting with the broader risk frameworks. The analyst will be responsible for monitoring progress against vulnerability mgmt goals, validating that vulnerabilities are remediated or approved plans are recorded within defined SLA targets, and providing compliance status through regular assessments, on-going leadership reviews and real-time dashboards.

As part of the role, the individual will assess existing reporting processes, refine them as business needs change, and work closely with Infosec and other stakeholders to strengthen data quality, reporting controls and governance models within Enterprise Technology. The ideal candidate brings relevant experience in IT risk reporting, governance and analytics, contributing to EY's overall risk management plan.

• Prepare and maintain Global Vulnerability mgmt compliance reports for all in-scope IT functions within Enterprise Technology (excluding Platform Mgmt), including GRAC reporting for in-scope I&O functions.
• Consolidate vulnerability, remediation and exception data from approved sources; validate completeness and accuracy before reports are published.
• Monitor compliance within agreed SLAs as established by Infosec, tracking remediation progress, overdue items and adherence to security policies.
• Prepare weekly / monthly SIC updates and leadership review materials to provide clear insights into vulnerability mgmt performance.
• Maintain reporting definitions, templates, calculation logic and documented controls to enable consistent and repeatable reporting.
• Collaborate with Infosec and I&O product managers to understand reporting requirements, source-data changes and future product road maps.
• Maintain end-to-end reporting views for vulnerabilities across ET (excluding Platform Management), including remediation plans, exceptions, approvals and closure status.
• Work closely with Infosec and stakeholders within ET to provide reporting support for Critical Vulnerability Response Plan (CVRP) exercises.
• Produce vulnerability management dashboards, scorecards, trend analysis and actionable insights for operational and leadership reviews.
• Collaborate with stakeholders and act as a reporting conduit between Infosec, Product/Application, Engineering, Operations & Management; follow up on data gaps and unresolved ownership issues.
• Provide segmented reporting and follow-up views for Data Restricted Countries (DRCS) and Local Support teams (excluding Platform Management).
• Identify, assess and highlight risk trends, ageing, recurring issues and priority remediation areas for I&O (excluding Platform Mgmt).
• Compliance Management: Support reporting that demonstrates whether in-scope portfolios for I&O adhere to GCoC recommended policies, compliances, regulations and standards.
• Identify opportunities to automate and standardize data preparation, validation, dashboard refresh and recurring report distribution.

• Experienced in managing key Stakeholder relationships, including Senior Management.
• Good understanding of Industry GRAC, vulnerability mgmt standards and compliance reporting.
• Knowledge of other Risk domains such as Operations Risk Management, IT Security and Cyber Risks, with the ability to interpret and report these risks.
• Good working knowledge of IT Operations, IT practices and operational reporting.
• Can work with minimum direction and deliver timely, accurate and high-quality results.
• High integrity; dedicated to excellence; highly attentive to details; flexible. Possesses sound Project Management and coordination skills.
• Self-motivated, with ability to work independently, as well as with other stakeholders in a collaborative manner.
• Strong problem-solving skills
• Experience in working with multiple stakeholders at different levels of the organization, including senior management.
• Excellent communication skills, especially related to facilitation, documentation and reporting
• Coordination skills and the ability to leverage support from other parts of the organization.
• Ability to work with cross-functional stakeholders and senior leadership

• Bachelor or Masters degree in Information Technology / Engineering

• 6 - 9+ years of relevant experience in IT risk, vulnerability management, compliance reporting, data analytics or Service Delivery

• Thought leadership
• Strategic Thinking
• Automation & standardization
• Relationship Management
• Interpersonal & Influencing skills
• Good communication skills
• Data-driven decision making