Senior Manager - Digital Risk, Risk Consulting

About the role

EY is looking for a Senior Manager to join its Digital Risk team in Risk Consulting, based in Warringah, Sydney. The role leads high-impact client engagements across technology risk, program and transformation risk, Responsible AI, data governance, operational resilience, digital compliance and IT internal audit, working with clients across sectors to understand their technology risks and design practical solutions. It is a hybrid position, and roles can potentially be adjusted to work flexibly with reduced hours.

Key responsibilities

• Lead and deliver Risk Consulting engagements covering technology and digital risk management, Responsible AI, cyber risk management, ERP advisory (including SAP), program risk management, operational resilience, digital compliance and IT internal audit.
• Act as a trusted advisor to C-suite technology leaders and business stakeholders (CIOs, CROs, CISOs, CAEs), helping them understand, prioritise and address critical digital risks.
• Design and deliver risk and control solutions that strengthen governance and control effectiveness.
• Lead assessments of IT processes against leading practice frameworks such as COBIT, ITIL, ISO 27001, ISO 42001 and the SOX Act.
• Manage and grow client relationships and support business development across priority accounts.
• Partner with Technology Consulting, AI & Data and Business Consulting to combine the right capabilities for clients.
• Develop and mentor people, and contribute to practice development, thought leadership and sector-specific offerings.

Required profile

• Previous experience in a consulting firm (Big 4 or boutique).
• Broad range of technology risk management experience to lead existing work, drive growth and manage day-to-day engagement delivery and teams.
• Ideally a bachelor's or master's degree in information systems, technology, finance, business, accounting, cybersecurity or a related discipline.
• Professional accreditations such as CISA, CIA, CISM, CISSP, CRISC, ISO 27001, ISO 42001, COBIT or ITIL are an advantage.
• Experience in regulated sectors, critical infrastructure, financial services, government, health, energy, telecommunications or other complex organisations is an advantage.

Required skills

• IT risk management, IT governance and controls, and cyber governance, risk and compliance.
• Responsible AI governance, including AI risk assessments and control frameworks.
• IT internal audit, data governance, data privacy and business continuity.
• Digital compliance frameworks such as ISO, PCI, NIST, COBIT and ITIL.
• Regulatory compliance including Privacy Act, SOCI Act and SOX.
• Operational resilience and business continuity programs.

What we offer

• Career development with future-focused skills.
• Flexible work arrangements.
• A benefits package including a yearly wellness incentive, an extra 8 weeks of flex leave per year and family-friendly policies including up to 26 weeks of gender-neutral paid parental leave.
• A competitive salary open to negotiation depending on skills and experience.