Digital Risk Lead: IT Security & GRC

EY; Toronto; On-site; CAD 110,000 - 160,000; Full time

Benefits offered by this job

Discretionary bonus

Medical & dental coverage

Pension plan

Vacation days

Personal days

Learning opportunities

Autonomy

Job summary

EY is seeking a Manager for the Digital Risk team to help clients identify, assess, and manage IT risks and controls. You will lead a team delivering risk advisory services across GRC, ERP, IT security, and cloud adoption risk, while guiding leadership on risk strategies and frameworks.

You will mentor staff, contribute to business development, and stay ahead of evolving digital risk trends in a dynamic consulting environment.

Qualifications

• 6–8 years in risk management, IT security, or related fields.
• At least 2 years in a leadership role.
• Bachelor’s Degree in IT, Business Admin or Accounting & Finance.
• Professional designation (CPA, CIA, CISA or CISM) is highly desirable.
• Strong skills in project management and engagement closure.
• Solid understanding of IT security frameworks and regulations.
• Consulting and client service delivery experience is desirable.
• Excellent analytical, problem-solving and communication skills.

Responsibilities

• Manage and deliver IT security, GRC, governance, risk assessments, Cloud Adoption Risk, and Emerging Technology Risk projects.
• Develop and maintain strong client relationships and tailor solutions.
• Collaborate with cross-functional teams to integrate digital risk management.
• Provide leadership with subject matter advice on risk management strategies and control frameworks.
• Coach and develop team members and foster continuous learning.
• Contribute to business development through proposals and client presentations.
• Stay abreast of emerging digital risks, technologies, and industry trends.

Skills

Risk management

IT security

GRC

ERP

Cloud risk

Emerging tech risk

Leadership

Client service

Project management

Education

Bachelor’s degree

Accounting & Finance

CPA/CISA/CISM designation desirable

Job description

EY is seeking a Manager for the Digital Risk team to help clients identify, assess, and manage IT risks and controls. You will lead a team delivering risk advisory services across GRC, ERP, IT security, and cloud adoption risk, while guiding leadership on risk strategies and frameworks.

You will mentor staff, contribute to business development, and stay ahead of evolving digital risk trends in a dynamic consulting environment.