Risk Consulting - Digital Risk -Senior- Resilience-Compliance-Cyber

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. 

Risk Consulting – Digital Risk – Senior:

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

About Global Delivery Services

Global Delivery Services refers to EY's worldwide network of service delivery centers. The GDS team plays an important role in EY’s strategy by ensuring effective support to EY’s growth agenda.

Our journey started in 2002 with approximately 200 people. Today we stand at 80,000+ professionals in ten locations around the world. We operate in Argentina, China, Hungary, India, Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom.

Client service is focused on providing Consulting, Assurance, Tax, Strategy & Transactions, and Knowledge support to our clients around the world. The teams enable account teams worldwide to provide seamless, high-quality, value-added support, helping deliver exceptional client service.

Enablement Services provides cost-effective, high-skilled, and innovative services to support EY’s global and local enablement teams. Markets, BMC, AWS, Finance and Accounting, Risk Management, Procurement, People Shared Services, IT Service Delivery and IT Global Infrastructure services, are among the services offered by Enablement Services.

Our innovation specialists serve the GDS Client Service and Enablement Services teams, along with Service Lines, Core Business Services and Sectors. The team brings the desired environment, technologies and skilled teams together for facilitation, rapid prototyping and innovative thinking. The competencies offered include analytics, digital, user experience, mobile technology, infrastructure, Microsoft technologies and open innovation.

The Opportunity

We are expanding our Resilience, Compliance & Cyber team and are looking for Senior with strong experience across operational resilience, technology compliance, cyber risk, and governance domains, with targeted expertise across:

• Operational Resilience and Business Continuity Management
• Disaster Recovery and Technology Resilience
• Regulatory Compliance and Controls Assurance
• Technology Governance, Risk and Compliance (GRC)
• Cyber Risk and Cyber Resilience
• Critical Business Services, Assets, and Dependency Assessments

Senior will play a key role in delivering resilience and compliance engagements by owning workstreams, conducting detailed assessments, facilitating stakeholder discussions, executing testing activities, and supporting the delivery of high-quality client outcomes. They will work across the engagement lifecycle, helping organizations strengthen their resilience capabilities, manage regulatory obligations, and improve their overall risk posture.

Your Key Responsibilities

• Perform operational resilience, business continuity, disaster recovery, cyber resilience, and compliance assessments across technology environments and business functions.
• Facilitate and review Business Impact Analyses (BIA), critical business service assessments, impact tolerance evaluations, and dependency mapping activities.
• Assess organizational resilience capabilities against leading frameworks and regulations, including DORA, CPS 230, NIS2, ISO 22301, ISO 27001, and NIST Cybersecurity Framework (CSF).
• Assess third-party, supplier, and critical service provider resilience, including dependency and concentration risk considerations.
• Review business continuity, disaster recovery, crisis management, incident management, and operational resilience programs for design and operating effectiveness.
• Evaluate critical processes, systems, assets, third-party providers, and technology dependencies supporting essential business operations.
• Assess recovery capabilities, including recovery strategies, recovery objectives (RTO/RPO), resilience testing programs, tabletop exercises, and simulation activities.
• Execute testing procedures, walkthroughs, evidence reviews, controls assessments, and assurance activities.
• Support regulatory readiness and compliance reviews, identifying gaps and assisting clients in strengthening governance and control frameworks.
• Conduct stakeholder interviews and workshops with business, technology, cyber security, resilience, and risk management teams.
• Identify resilience, compliance, and cyber risk exposures and develop practical remediation recommendations.
• Contribute to the development of high-quality reports, presentations, management summaries, and client deliverables.
• Manage assigned workstreams and support junior team members to deliver quality outcomes within agreed timelines.
• Responsible for decision-making, optimizing processes, resource management, and overseeing team management as needed for task execution.
• Accountable for allocating personnel, supervising team members, assigning tasks, ensuring that the team has the necessary tools and support to succeed in their roles and optimizing and evaluating their performance to meet organizational goals.

Skills and attributes for success

• Strong understanding of Operational Resilience, Business Continuity Management (BCM), Disaster Recovery (DR), Crisis Management, and Cyber Resilience concepts.
• Experience conducting Business Impact Analysis (BIA), critical business service assessments, critical asset assessments, dependency mapping, and resilience testing activities.
• Working knowledge of resilience, risk, and compliance frameworks, including ISO 22301, ISO 27001, NIST CSF, NIST 800-series guidance, DORA, CPS 230, NIS2, and related industry standards.
• Understanding of governance, risk management, controls assurance, and regulatory compliance principles.
• Ability to assess operational, technology, cyber, and third-party risks impacting business resilience.
• Strong analytical and problem-solving capabilities with the ability to translate complex findings into actionable business recommendations.
• Strong stakeholder management, workshop facilitation, communication, and report-writing skills.
• Ability to independently manage assigned workstreams while collaborating effectively across global teams.
• High attention to detail, quality, and client service excellence.
• Ability to collaborate effectively with global teams and cross-functional stakeholders.
• Demonstrate AI awareness and proficiency by leveraging approved AI tools to enhance productivity, improve decision-making, and drive innovation while ensuring responsible, ethical, and secure use of AI technologies.
• Champion a growth mindset toward emerging technologies by continuously building AI capabilities, identifying opportunities for AI-driven transformation, and promoting AI adoption and best practices within teams and client engagements.

To Qualify for the Role, You Must Have

• Bachelor's or Master's degree in Information Security, Cyber Security, Technology Risk, Risk Management, Business Continuity, Information Systems, Computer Science, or a related field.
• 3-5 years of experience in Operational Resilience, Business Continuity Management, Disaster Recovery, Technology Risk, Compliance, Cyber Security, Internal Audit, or consulting engagements.
• Experience defining, reviewing, or validating Recovery Time Objectives (RTOs), Recovery Point Objectives (RPOs), and resilience testing outcomes.
• Experience supporting resilience assessments, business continuity programs, disaster recovery planning and testing, regulatory compliance reviews, cyber resilience initiatives, or technology risk engagements.
• Working knowledge of resilience, risk management, and compliance frameworks including NIST Cybersecurity Framework (CSF), NIST 800-series guidance, ISO 22301, ISO 27001, DORA, CPS 230, NIS2, and related industry standards.
• Experience performing Business Impact Analysis (BIA), critical business services assessments, critical asset identification, dependency mapping, recovery strategy assessments, resilience testing, or controls assurance activities.

Ideally, You’ll Also Have

• ISO 22301 Lead Auditor (LA) / Lead Implementer (LI) - Business Continuity Management Systems (BCMS)
• ISO 27001 Lead Auditor (LA) / Lead Implementer (LI) - Information Security Management Systems (ISMS)
• ISO 31000 Risk Management
• CRISC (Certified in Risk and Information Systems Control)
• CISA (Certified Information Systems Auditor)
• Proven experience in direct client facing roles, partnering with cross functional teams to deliver assessment and remediation activities.

What we offer you

At EY, we’ll develop you with future-focused skills and equip you with world-class experiences. We’ll empower you in a flexible environment and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more.

Are you ready to shape your future with confidence? Apply today.

To help create an equitable and inclusive experience during the recruitment process, please inform us as soon as possible about any disability-related adjustments or accommodations you may need.

Our Commitment: As a commitment, we persistently endeavour to embody our values, fulfil our purpose, and champion inclusiveness. Our dedication is to cultivate EY into an environment where diverse perspectives are celebrated, creating a supportive atmosphere for individuals to authentically be themselves and contribute their utmost.

Professional Development: From entry-level employees to senior leaders, we believe in continuous learning. We offer opportunities to build new skills, take on leadership roles, and connect and grow through mentorship.

People and Culture: In our dynamic workplace, diversity, equity, and inclusiveness are ingrained in our culture. We're united by a commitment to create an environment where every individual's differences are valued, practices are equitable, fostering a sense of belonging. Our shared values include integrity, respect, teaming, inclusiveness, energy, enthusiasm, courage to lead, and building relationships based on doing the right thing.

Benefits: Embark on a transformative career journey with us and indulge in a suite of premium benefits, encompassing exclusive health and wellness packages, enticing rewards, and cutting-edge learning opportunities that empower you to continually grow and excel in your professional and personal development.

How to Apply: If you are passionate to join us and are aligned with our commitment to building a better working world, we invite you to apply by completing our user-friendly form with personal and professional information and by providing your consent to data privacy.

Successful candidates advance to a competency-based interview. If mutual interest persists, a job offer awaits.

“We are an equal opportunity employer and are committed to Diversity, Equity & Inclusion”.

EY | Building a better working world 

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.