Product Security Engineer
Ernst and Young2 days ago
Milan, ItalySenior
Responsibilities
- Manage C1/C4 data assessment processes for AI products.
- Oversee AI compliance across the Factory portfolio, including the EU AI Act, GDPR, and data sovereignty.
- Coordinate QRM processes covering independence, software reselling, and procurement compliance.
- Ensure the conformity of SOC and sovereign environments for internal assets.
- Support engagement teams with the certification and secure adoption of AI products.
- Maintain the approved software catalog and manage technology risk.
- Act as a key interface with EY risk and compliance functions and clients on AI trust topics.
Requirements
- At least 5 years of experience in cybersecurity, risk management, or technology compliance.
- In-depth knowledge of the EU AI Act, GDPR, and AI governance frameworks.
- Experience with enterprise INFOSEC processes and security certifications.
- Familiarity with EY’s regulatory context, including QRM and independence compliance.
Benefits
- More than 50 hours of technical and management training annually.
- Hybrid work without centrally prescribed office days.
- Ability to work remotely from abroad for up to 20 days when not on assignment.
- International mobility and collaboration through EY’s global professional network.
- Career development programs and support from a Counselor from the first day.
- Corporate welfare benefits and leadership programs.
- Inclusive workplace and accommodations for people with disabilities in accordance with Italian Law L.68/99.
Categories
About Ernst and Young
Ernst & Young (EY) provides audit/assurance, tax, consulting, strategy and transactions services to enterprises, financial institutions, and public‑sector clients. Structured as a global network of partner‑owned member firms, it sells professional services on a fee basis, including a dedicated Financial Services Organization for banking, insurance, and capital markets. Headquartered in London, EY was formed in 1989 from the merger of Ernst & Whinney and Arthur Young, and operates in 150+ countries.