Senior Consultant - Digital Risk

About the role

EY is hiring a Senior Consultant in Digital Risk within its Risk Consulting sub-service line, based in Melbourne. You will join a team that helps organisations manage technology-related risk across complex digital environments, supporting clients in understanding and addressing digital and IT risks, strengthening governance and controls and responding to an evolving regulatory and risk landscape. The role spans internal audit, IT risk, technology assurance and advisory engagements.

Key responsibilities

• Deliver broad-ranging Risk Consulting engagements, including technology risk, internal audit support, business processes and controls advisory, data governance, privacy, resilience and technology-enabled Governance, Risk and Compliance solutions.
• Deliver digital and IT risk engagements supporting Internal Audit, evaluating the design and operating effectiveness of IT controls such as third-party risk management, cybersecurity, data governance, privacy, application and IT general controls.
• Support the planning and execution of engagements, including developing scopes of work, risk and control matrices, work programs and related planning documentation.
• Prepare clear, high-quality client deliverables and collaborate with engagement teams to meet service expectations, timelines and quality standards.

Required profile

• Relevant experience in internal or external audit and/or risk consulting, with exposure to technology risk, IT controls and governance across IT, financial and/or operational environments.
• Strong problem-solving skills, business acumen and clear written and verbal communication.
• Proven ability to build and manage stakeholder relationships within engagement teams and with clients.
• Australian citizenship is highly desirable, as the role supports local and federal government projects.
• A tertiary qualification in information technology, business, accounting, finance or a related discipline is ideal.

Required skills

• Ideally exposure to frameworks such as COBIT, ITIL, ISO 27001 or SOX.
• Ideally professional certifications such as CISA, CIA, CISM, CISSP or similar, or a willingness to work towards them.

What we offer

• Career development with future-focused skills and world-class experiences.
• Flexible work arrangements, with potential to adjust hours.
• A benefits package including a yearly wellness incentive, an extra 8 weeks of flex leave per year and family-friendly policies including up to 26 weeks of gender-neutral paid parental leave.
• A competitive salary open to negotiation depending on skills and experience.