Senior Manager - Digital Risk - Risk Consulting

• Leading and delivering broad ranging Risk Consulting engagements including IT risk management, Digital Compliance (including ISO, PCI, Privacy and other leading security and technology frameworks and regulations), Cyber Risk Management, ERP advisory (including SAP), Program Risk Management, Resiliency, Responsible AI, and Internal Audit reviews.

• Leading and directing assessments of IT processes against leading practice IT risk and security frameworks and common standards (e.g. CoBIT, ITIL, ISO 27001, Sarbanes Oxley (SOX) Act)

• Leading and managing teams to deliver IT Risk and Audit engagements - including the execution of evaluating and design of IT internal controls (e.g. application & IT general controls) in support of internal audits as well as Program Assurance engagements

• Nurturing client relationships to achieve service expectations, deliverables and outcomes and assisting in the preparation of reports for clients and other stakeholders

• Mentoring and quality assuring teams, taking accountability for outcomes, delegating and supervising large teams, structuring engagements and engagement economics, designing innovative solutions and managing key elements of the business

• Partnering with internal and external teams, addressing compliance, financial and operational risk, and assessing current state internal controls and frameworks in order to mitigate current and emerging risks

• Contribute to people-related initiatives including recruiting, retaining and training EY teams

• Actively identify opportunities to better serve clients

• Develop people through effectively supervising, coaching, and mentoring all levels of staff

• Leading business development initiatives

The key attributes of the role are previous experience working in a consulting firm (Big 4 or boutique), who has a broad range of technology risk management experience to lead our existing portfolio of work, drive growth and manage day to day engagement delivery/teams. A Technology Risk Senior Manager who has broad range of experience and capability to support across various digital risk solutions and related areas e.g. experience in various aspects:

• Governance, Risk and Compliance

• Internal Controls and Internal Audit (incl. Controls optimisation, SoX)

• Assurance – technology-focused internal audit (incl. IT General Controls, Cyber Security, and AI Governance)

• Technology-enabled Integrated Risk Management (IRM) or Governance, Risk and Compliance (GRC) programs

• Portfolio, Program and Project risk management consulting and/or assurance services

• Regulatory Compliance (e.g. Privacy, SoCI Act, SoX, Spam Act)

• Resiliency – design, build, implementation of business and technology resilience programs

• AI Governance, Responsible Use of AI (incl. Responsible AI strategy, AI Governance framework)

• Data governance, Risk Analytics, etc