Stay In Compliance Lead - DWES

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Job Title   :    Stay in Compliance Lead - DWES     Job Summary:   The Stay In Compliance Lead within Digital Workplace & Experience Services (DWES) is responsible for defining, governing, and driving the digital workplace compliance strategy to ensure endpoints, collaboration platforms, and Microsoft 365 services remain current, secure, and aligned with supported hardware and software standards. The role is responsible for maintaining the software and hardware currency of the digital workplace estate across Windows and macOS endpoints, mobile devices, virtual solutions, Exchange, SharePoint, OneDrive, Teams, Power Platform, and related M365 platforms by leading regular software upgrades, security patching, hardware refresh governance, and configuration remediation activities.   The position proactively identifies and mitigates security risks by leveraging OEM tools, vulnerability intelligence platforms (including MSRC advisories and Microsoft Defender for Endpoint), and security advisories to assess the exposure of the digital workplace estate to emerging threats and vulnerabilities. Working closely with I&O Stay in Compliance (SIC), Business Relationship Managers (BRMs), OSTS, Endpoint Management, Collaboration & Platforms, M365 Foundation Services, Ops & Engineering, Product Owners, and vendor partners, the role drives DWES enterprise-wide compliance initiatives, ensures timely execution of remediation activities, and strengthens the organization's overall digital workplace security posture. The Stay In Compliance Lead serves as the central authority for endpoint and platform lifecycle governance, vulnerability management, compliance reporting, and risk reduction across the global digital workplace estate.     Job Description

Own and lead the Digital Workplace & Experience Services (DWES) vulnerability management program, ensuring identification, assessment, prioritisation, remediation, and reporting of security vulnerabilities across the entire DWES product portfolio. Develop and maintain a comprehensive vulnerability remediation and risk management roadmap, leveraging data-driven insights, analytics, and risk-based prioritisation to reduce overall security exposure. Establish and execute Global Vulnerability Management compliance plans across Windows and macOS endpoints, mobile devices, virtual solutions, Exchange, SharePoint, OneDrive, Teams, Power Platform, and associated Microsoft 365 platforms. Drive end-to-end remediation governance for critical, high, and medium-risk vulnerabilities, ensuring timely closure or approved risk exceptions in accordance with business and security requirements. Maintain accountability for compliance against remediation SLAs and security standards established by Information Security, tracking progress, ageing, and compliance performance across the DWES estate. Partner with Information Security, Product Owners, Endpoint Management, Collaboration & Platforms, Ops & Engineering, Service Management, OSTS, BRMs, and other stakeholders to ensure effective execution of security remediation activities. Define, implement, and continuously enhance policies, standards, processes, and procedures governing vulnerability management, software currency, hardware lifecycle compliance, and security remediation activities. Establish and maintain a robust controls framework that ensures effective governance, auditability, compliance monitoring, and risk management across DWES services. Collaborate closely with Information Security and Enterprise Technology stakeholders to lead DWES participation in Critical