Risk Consulting - Digital Risk - Senior - Cyber And Cloud Risk

Risk Consulting – Digital Risk – Senior:

About Global Delivery Services

Global Delivery Services refers to EY's worldwide network of service delivery centers. The GDS team plays an important role in EY’s strategy by ensuring effective support to EY’s growth agenda.

Our journey started in 2002 with approximately 200 people. Today we stand at 80,000+ professionals in ten locations around the world. We operate in Argentina, China, Hungary, India, Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom.

Client service is focused on providing Consulting, Assurance, Tax, Strategy & Transactions, and Knowledge support to our clients around the world. The teams enable account teams worldwide to provide seamless, high-quality, value-added support, helping deliver exceptional client service.

Enablement Services provides cost-effective, high-skilled, and innovative services to support EY’s global and local enablement teams. Markets, BMC, AWS, Finance and Accounting, Risk Management, Procurement, People Shared Services, IT Service Delivery and IT Global Infrastructure services, are among the services offered by Enablement Services.

Our innovation specialists serve the GDS Client Service and Enablement Services teams, along with Service Lines, Core Business Services and Sectors. The team brings the desired environment, technologies and skilled teams together for facilitation, rapid prototyping and innovative thinking. The competencies offered include analytics, digital, user experience, mobile technology, infrastructure, Microsoft technologies and open innovation.

The Opportunity

We are expanding our Digital Risk team and are looking for Senior Consultants with strong hands-on expertise across at least two of the following domains:

• IT Risk
• Cloud Risk
• Technology Controls Assurance
• Third Party Digital Risk
• Cyber and Operational Resilience

Senior will play a key role in delivering Digital Risk engagements by owning specific workstreams, performing detailed assessments, and contributing effectively to client solutions in a fast‑paced and evolving technology risk landscape. They will support end‑to‑end delivery by conducting deep‑dive analysis, managing assigned workstreams, and ensuring high‑quality outputs across all phases of the engagement.

Your Key Responsibilities

• Lead client discussions to assess technology, cyber, and operational risks, translating complex technical issues into clear, actionable business insights.
• Perform comprehensive reviews of IT controls, cloud environments, data management processes, and third‑party ecosystems; identify control gaps and provide pragmatic remediation recommendations.
• Conduct cyber risk assessments across cloud, network, SaaS, and on‑premises environments, evaluating vulnerabilities, misconfigurations, and security exposures.
• Support clients in enhancing cybersecurity controls, including data protection, incident response, endpoint security, identity management, and third‑party cyber oversight.
• Manage discrete workstreams, guide junior team members, and ensure the delivery of high‑quality assessments, reports, and stakeholder communications.
• Interpret regulatory requirements and industry frameworks (e.g., ISO, NIST, SOC, GDPR) to help clients strengthen compliance, governance, and resilience maturity.
• Collaborate with IT and security teams to design actionable remediation plans that improve business continuity, disaster recovery, and overall risk posture.
• Drive engagement momentum through structured task planning, risk tracking, dependency management, and support for implementation of risk‑reducing improvements.
• Responsible for decision-making, optimizing processes, resource management, and overseeing team management as needed for task execution.
• Accountable for allocating personnel, supervising team members, assigning tasks, ensuring that the team has the necessary tools and support to succeed in their roles and optimizing and evaluating their performance to meet organizational goals.

Skills and attributes for success

• Strong fundamentals across at least two Digital Risk areas.
• Working knowledge of cyber and cloud security standards including NIST, ISO 27001, CSA CCM, SOC 2.
• Good understanding of network, cloud, and application security.
• Ability to break down complex issues into actionable insights.
• Strong communication skills and ability to work with global stakeholders.
• Demonstrated analytical capability and attention to detail.
• Ability to work collaboratively across teams and adapt to dynamic client environments.

To qualify for the role, you must have

• Bachelor’s/Master’s degree in IT, Cybersecurity, Risk, Computer Science, or related field.
• 3–5 years of relevant Digital, Cyber, Cloud or Technology Risk experience.
• Hands on exposure in at least two domains listed under the role split.

Additionally, good to have

• Proven experience in direct client‑facing roles, partnering with cross‑functional teams to deliver assessment and remediation activities.
• Strong experience working directly with technology and business stakeholders to evaluate cyber controls, collaborate with internal audit and IT security teams, and support remediation of issues across domains such as network security, cloud, identity, and vulnerability management.
• Professional certifications such as ISO 27001 LA, CISA, CCSK, AZ 900, or equivalent.

Ideally, you’ll also have

• Experience delivering IT risk, cloud risk, cyber assurance, or operational resilience assessments.
• Exposure to tools such as Splunk, Sentinel, Prisma Cloud, Tenable, or similar.
• Prior Big 4 or consulting leadership experience.

What we offer you

At EY, we’ll develop you with future-focused skills and equip you with world-class experiences. We’ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams.

• Our Commitment: As a commitment, we persistently endeavour to embody our values, fulfil our purpose, and champion inclusiveness. Our dedication is to cultivate EY into an environment where diverse perspectives are celebrated, creating a supportive atmosphere for individuals to authentically be themselves and contribute their utmost.
• Professional Development: From entry-level employees to senior leaders, we believe in continuous learning. We offer opportunities to build new skills, take on leadership roles, and connect and grow through mentorship.
• People and Culture: In our dynamic workplace, diversity, equity, and inclusiveness are ingrained in our culture. We're united by a commitment to create an environment where every individual's differences are valued, practices are equitable, fostering a sense of belonging. Our shared values include integrity, respect, teaming, inclusiveness, energy, enthusiasm, courage to lead, and building relationships based on doing the right thing.
• Benefits: Embark on a transformative career journey with us and indulge in a suite of premium benefits, encompassing exclusive health and wellness packages, enticing rewards, and cutting-edge learning opportunities that empower you to continually grow and excel in your professional and personal development.
• How to Apply: If you are passionate to join us and are aligned with our commitment to building a better working world, we invite you to apply by completing our user-friendly form with personal and professional information and by providing your consent to data privacy.