Senior Consultant, Digital Risk

Senior Consultant - Digital Risk, Risk Consulting

At EY, you'll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we're counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Our Digital Risk team is dedicated to providing innovative solutions that mitigate risks associated with digital transformation, cybersecurity, and regulatory compliance. The Digital Risk practice is growing rapidly, and we are looking for Senior Consultants to help drive success for our clients by helping them navigate the complexities of the digital landscape.

• Lead client discussions to assess technology, cyber, and operational risks, translating complex technical issues into clear business impacts.
• Perform detailed reviews of IT controls, cloud environments, data processes, and third‑party risks, identifying gaps and recommending remediation actions.
• Conduct cyber risk assessments across cloud, network, SaaS, and on‑prem environments, identifying vulnerabilities, misconfigurations, and emerging threats.
• Support clients in enhancing cybersecurity controls such as data protection, incident response, endpoint security, and third‑party cyber oversight.
• Manage work streams, coordinate junior team members, and ensure high‑quality delivery across assessments, reports, and stakeholder updates.
• Analyse regulatory expectations and industry frameworks to help clients strengthen compliance, resilience, and governance maturity.
• Work with security and IT teams to design pragmatic remediation plans that strengthen resilience, business continuity, disaster recovery and improve compliance posture.
• Drive project momentum by planning activities, tracking risks and dependencies, and supporting clients in implementing practical, risk‑reducing improvements.

• Develop and maintain documentation, reports, and dashboards for risk tracking and compliance monitoring, emphasizing digital risks.
• Lead or contribute to digital risk maturity assessments and process improvement initiatives.

• Strong analytical and problem‑solving skills, with the ability to assess complex IT environments and identify control, security, and compliance gaps.
• Knowledge of technology risk frameworks (e.g., ISO 27001, NIST, COBIT) and understanding of cyber domains such as IAM, cloud security, data protection, and incident response.
• Excellent client‑facing and communication skills to translate technical risks into clear business impacts and actionable recommendations.
• Project delivery and stakeholder management capabilities, including leading work streams, mentoring juniors, and ensuring high‑quality outputs under tight timelines.
• Ability to interpret regulatory requirements and translate them into actionable IT, Cyber and Digital controls.
• Experience in conducting risk assessments and developing risk mitigation strategies.

We are interested to hear from people who are motivated to form a part of a growing team, who embrace diversity and inclusion and who are market‑oriented and ready to help our clients solve and control their biggest issues, risks and regulatory/compliance requirements.

EY is committed to being an inclusive employer and we are happy to consider flexible working arrangements. We strive to achieve the right balance for our people, enabling us to deliver excellent client service whilst allowing you to build your career without sacrificing your personal priorities. While our client‑facing professionals can be required to travel regularly, and at times be based at…