Senior Consultant, Digital Risk, Risk Consulting

Overview

In this role you help clients navigate digital risk amid transformation by leading cyber, technology, and regulatory risk workstreams. You’ll translate technical findings into business impact, strengthen controls, and guide maturity and governance improvements. You’ll join EY’s Digital Risk team to deliver practical risk-based solutions at scale, collaborating with cross-functional teams. This is a chance to shape client outcomes in a globally connected, inclusive environment with strong learning opportunities.

Pay / Benefits

• flexible working arrangements
• Total Rewards package
• EY Tech MBA by Hult International Business School
• career development opportunities
• health and well-being support
• insurance and savings options

Responsibilities

• Lead client discussions to assess technology, cyber, and operational risks and translate technical issues into business impacts
• Review IT controls, cloud environments, data processes, and third‑party risks to identify gaps and propose remediation actions
• Conduct cyber risk assessments across cloud, network, SaaS, and on‑prem environments to identify vulnerabilities and threats
• Support clients in enhancing cybersecurity controls such as data protection, incident response, endpoint security, and third‑party oversight
• Manage workstreams, coordinate junior team members, and ensure high-quality delivery across assessments, reports, and stakeholder updates
• Analyze regulatory expectations and industry frameworks to strengthen compliance, resilience, and governance maturity
• Collaborate with security and IT teams to design remediation plans strengthening resilience, business continuity, disaster recovery, and compliance posture
• Drive project momentum by planning activities, tracking risks/dependencies, and helping implement practical risk-reducing improvements
• Develop and maintain documentation, reports, and dashboards for risk tracking and compliance monitoring, focusing on digital risks
• Lead or contribute to digital risk maturity assessments and process improvement initiatives

Key requirements

• Strong analytical and problem‑solving skills to assess complex IT environments and identify gaps
• Knowledge of technology risk frameworks (ISO 27001, NIST, COBIT) and cyber domains (IAM, cloud security, data protection, incident response)
• Excellent client-facing and communication skills to translate risks into actionable recommendations
• Project delivery and stakeholder management capabilities, including leading workstreams and mentoring juniors
• Ability to interpret regulatory requirements and translate them into actionable IT, cyber and digital controls
• Experience in conducting risk assessments and developing risk mitigation strategies

• Client-facing communication
• Problem solving
• Mentoring juniors
• ISO 27001, NIST, COBIT knowledge
• IAM, cloud security, data protection
• Incident response

Full job description from WhatJobs. Apply for this role →