Digital Risk Consulting - Governance, Risk and Compliance Consultant (AI, Digital & Cyber)

At EY, we’re all in to shape your future with confidence. 

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. 

Join EY and help to build a better working world.

Nāu te rourou, nāku te rourou, ka ora ai te iwi  

With your contribution and my contribution, together we will thrive. 

Hei Oranga Iwi | The opportunity

As a Senior Consultant in our Digital Risk Consulting team, you will support the delivery of client engagements focused on identifying, assessing, and managing digital, technology, cyber, and AI-related risks. You will work across a broad range of industries, assisting organisations to strengthen governance, risk and compliance (GRC), enhance control environments, and adopt practical solutions to improve digital trust, cyber resilience, and the responsible use of emerging technologies.

Are you ready to help build a better working world by supporting organisations to safeguard their digital assets and navigate an evolving digital, cyber and AI risk landscape? EY Aotearoa New Zealand is seeking a talented and motivated Senior Consultant to join our high-performing Digital Risk Consulting team.

Ko Tō Rourou | Key Responsibilities 

• Support the delivery of digital, AI and cyber risk assessments, including maturity reviews, control assessments, risk workshops, and control effectiveness evaluations.
• Assist in the design and implementation of digital, AI and cyber risk frameworks aligned to client business objectives, risk appetite, and regulatory expectations.
• Perform analysis of client processes, systems, controls, policies, and governance arrangements to identify risk areas and improvement opportunities.
• Support clients in understanding and responding to regulatory and compliance requirements, including ISO 27001, SOC reporting, NIST, NZISM, and emerging AI governance expectations.
• Prepare high-quality deliverables, including risk assessment outputs, control documentation, reports, presentations, and client-ready recommendations.
• Work collaboratively with engagement managers and senior team members to deliver project activities within agreed timelines and quality expectations.
• Build effective relationships with client stakeholders and communicate technology, cyber and AI risk matters clearly to both technical and non-technical audiences.
• Coach and support junior team members by reviewing work, sharing knowledge, and contributing to a collaborative team environment.
• Contribute to proposals, internal initiatives, market-facing materials, and thought leadership activities where required.

Ngā Pūkenga | Skills and attributes for success  

• Experience in cybersecurity, digital risk, AI risk management, technology risk, IT audit, or technology assurance within consulting, professional services, or a complex enterprise environment.

• Strong understanding of digital, AI and cyber risk concepts, including governance, risk and compliance, technology controls, data governance, responsible AI, and emerging technology risks.
• Practical experience assessing controls, documenting findings, analysing risks, and developing clear, actionable recommendations.
• Exposure to recognised frameworks and standards such as ISO 27001, NIST, SOC reporting, NZISM, or AI governance frameworks.
• Ability to communicate complex technology, cyber and AI risk topics clearly and confidently to diverse stakeholders.
• Strong analytical, problem-solving, report writing, and stakeholder management skills.
• Ability to work both independently and as part of a team, managing competing priorities and delivering high-quality work.
• Relevant professional certifications or training, such as CISA, CISM, CRISC, CISSP, ISO 27001, ISO/IEC 42001, or other technology, cyber, data or AI risk-related qualifications, are desirable.
• Experience in consulting or professional services is preferred.

Ko Taku Rourou | What we offer you 

At EY, we’ll fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. 

• Career development: At EY, your career is yours to shape! We’ll develop you with future-focused skills and equip you with world-class experiences www.ey.com/nz/careerdevelopment 

• Flexible work arrangements: Our flexible work policies empower you to balance your professional and personal life, fostering a culture of trust and autonomy.  

• A comprehensive benefits package: From a yearly wellness incentive, to access to additional 8 weeks of flex leave per year, and family-friendly policies, including up to 26 weeks of gender-neutral paid parental leave, we cater to your diverse needs to help you thrive both personally and professionally www.ey.com/nz/benefits   

Inclusiveness is core to who we are and how we work together, driving value for our people and for our business. We encourage applications from people of all ages, nationalities, abilities, cultures, sexual orientations, and gender identities and are committed to providing an equitable and barrier free recruitment experience for all. We encourage you to share any support and adjustments you need to be your best and participate equitably in our recruitment process. We understand sharing your needs with us can be daunting, so if you have questions before or during your application, we welcome you to get in touch at contactrecruitment@au.ey.com or +64 9 300 7044 (option 2). Anything you tell us will be kept completely confidential. 

He rourou kai kei ō ringa hei tākoha? Tēnā haria mai!Are you ready to shape your future with confidence? Apply today #LI-Hybrid 

EY | Building a better working world 

Our preferred applicant will be required to undertake employment screening by EY or our external third-party provider. 

© 2026 Ernst & Young New Zealand. A member firm of Ernst & Young Global Limited. All Rights Reserved.