Senior Consultant Enterprise Risk - Technology Risk - Sector Focus Industries

at  EY

EY Consulting is a fast-moving, high-growth area within EY, and this with a huge potential for you. It offers variety, challenge, responsibility and the opportunity to realize your leadership potential. Our competency teams are focused on helping our clients to improve their business performance and operational efficiency, whilst managing risk. We help clients by delivering assessment, transformation and assurance solutions in specialty areas, like finance, supply chain, strategic choices, risk management, cyber security and technology.

THE OPPORTUNITY: YOUR NEXT ADVENTURE AWAITS?

You have a broad interest in various sectors, subjects, organizations and processes and a specific interest in Technology Risk? You want to learn more about identifying emerging risks through Artificial Intelligence, or how governance, risk & compliance can enable organizations in their sustainability journey? Do not look any further! Enterprise Risk at EY is a fast-moving, high-growth area with huge potential. We help clients managing risks throughout the full breadth of their operations by delivering (IT) Risk Management, Internal Controls & ITGC, Internal Audit and Compliance solutions. We deliver assessment, transformation and process efficiency solutions in specialty areas like IT risk, Finance, supply chain, internal audit, regulatory compliance, (third party) risk management, People and organizational change, strategic direction.
As we have ambitious growth plans at EY Consulting (Enterprise Risk), we seeking a Senior Consultant Technology Risk to support our growth, and help our clients with their ambitions in the field of Technology Risk Management.

In this role, you will advise our private and public sector clients to achieve their objectives by supporting them to identify and manage their technology risks. During these engagements we evaluate the company’s technology universe from a technical and business perspective and execute in-depth assessments of the IT processes, risks and controls. Topics covered include:

• IT Risk assessments and framework development
• Evaluating the technology risk posture of third-party vendors and partners and developing and implementing third-party risk management programs as well as setting-up and managing third party compliance reviews in licensing, channel and/or OEM contexts
• IT Internal Audit support: collaborating with internal auditors to provide expertise on technology-related controls and risks (including ITGC)
• Reviewing the setup of complex systems and technology governance frameworks and controls assessment in line with industry leading practices (e.g. ITIL, COBIT, NIST, ISO,…)
• Assessing the risks associated with technology transformation initiatives, such as cloud migrations, digital transformations, and system upgrades
• Providing strategic advice on technology risk management and assisting clients in the development of long-term risk management strategies
• Setting-up and managing Software Asset Management (SAM) reviews at current and future clients
• Regulatory Compliance Audits: ensuring that the client’s IT systems and processes comply with relevant industry regulations and standards (e.g., GDPR, SOX, PCI DSS, ISO 27001)