Manager, Digital Risk

Ernst & Young Advisory Services Sdn Bhd; London; On-site; GBP 75,000 - 120,000; Full time

Job summary

A leading global consulting firm seeks a Manager in their Digital Risk team to enhance client cybersecurity and risk management strategies. In this dynamic role, you will develop IT policies, oversee projects, and mentor junior staff while navigating a rapidly evolving digital landscape. The position demands strong expertise in regulatory frameworks and risk mitigation, offering a chance to work closely with varied clients and diverse teams.

Benefits

Flexible working arrangements

Continuous learning opportunities

Comprehensive Total Rewards package

Diverse and inclusive culture

Qualifications

• 5+ years of experience in digital risk management or related fields.
• Familiarity with regulatory compliance requirements (e.g., GDPR, ISO 27001).
• Proficiency in risk management tools and frameworks.

Responsibilities

• Manage and deliver Digital Risk projects ensuring client satisfaction.
• Lead client interactions and build relationships.
• Draft and own risk assessments to identify vulnerabilities.

Skills

IT governance

cybersecurity

project management

communication

data analysis

Education

Professional certifications (CISA, CISSP)

Tools

GRC platforms

Job description

Press Tab to Move to Skip to Content Link

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Our Digital Risk team is dedicated to providing innovative solutions that mitigate risks associated with digital transformation, cybersecurity, and regulatory compliance. The Digital Risk practice is growing rapidly, and we are looking for Managers to help drive success for our clients by helping them navigate the complexities of the digital landscape.

The opportunity

As a Manager in our Digital Risk team, you will play a key role in mitigating IT risks for our diverse set of clients. Our Digital Risk solutions include navigating IT controls assessments and implementations, cybersecurity management, digital resilience and technological continuity, the need for trusted AI in a rapidly-evolving landscape, and more. This role requires strong IT technical and compliance expertise, a solid understanding of relevant regulatory frameworks, and strong project management and communication skills.

Your key responsibilities

• Manage and deliver Digital Risk projects and specific workstreams within larger Risk and Consulting engagements, ensuring projects are on time, within budget, and meet client expectations.
• Lead day-to-day client interactions, presenting findings, facilitating workshops, and building strong working relationships.
• Manage clients and oversee teams working to scope, assess and remediate or improve digital risk management strategies, compliance frameworks, and overall risk mitigation efforts.
• Draft and own risk assessments to identify vulnerabilities and recommend appropriate controls and solutions. Develop and implement relevant IT policies, processes, and procedures in line with client requirements and industry/compliance best practices.
• Support clients in navigating regulatory requirements and compliance audits, including risk mitigation strategies for digital technologies.
• Analyse and drive digital risk data and insights to drive informed decision-making and optimize risk management practices. Provide practical recommendations to clients on risk mitigation strategies, technology compliance, and other industry best practices.
• Own and manage the implementation of risk management tools and automation of processes using industry-leading platforms, including those that support AI governance when relevant. Lead or contribute to digital risk maturity assessments and process improvement initiatives.
• Develop and maintain documentation, reports, and dashboards for risk tracking and compliance monitoring, emphasizing digital risks.
• Work cross-functionally with internal and client teams across IT, compliance, finance, and security to drive integrated risk management solutions.
• Coach and mentor junior team members, supporting their professional development and contributing to a positive team environment.
• Stay informed about industry trends, including regulatory changes, technology growth (including AI and cloud systems), and other relevant IT risk best practices.
• Contribute to the development of proposals and thought leadership materials under the guidance of senior leadership.

Skills and attributes for success

• Industry-leading understanding of digital risk frameworks, methodologies, and compliance requirements.
• Ability to interpret regulatory requirements and translate them into actionable business strategies for IT risks and opportunities.
• Proficiency in risk management tools and platforms (e.g. GRC platforms), ideally with experience in implementing and/or optimizing these solutions.
• Experience in leading risk assessments and developing and implementing risk mitigation strategies.
• Strong analytical and problem-solving skills with experience in data-driven decision-making.
• Ability to manage and run multiple projects and stakeholders in a dynamic environment.
• Strong communication and presentation skills for executive reporting, stakeholder engagement, and internal team leadership.

To qualify for the role you should have

• 5+ years of experience in digital risk management, IT governance, cybersecurity, or related fields; experience in AI would be an additional advantage.
• Professional certifications such as CISA, CISSP, or equivalent (preferred but not mandatory).
• Expertise in risk management tools and frameworks, as well as development of IT methodologies and practices.
• Familiarity with regulatory compliance requirements (e.g., UK Corporate Reform, SOx, GDPR, ISO 27001) and industry best practices.
• Experience working with IT, compliance, and vendor management teams.

What we look for

We are interested to hear from people who are motivated to form a part of a growing team, who embrace diversity and inclusion and who are market-oriented and ready to help our clients solve and control their biggest issues, risks and regulatory/compliance requirements.

What we offer

EY is committed to being an inclusive employer and we are happy to consider flexible working arrangements. We strive to achieve the right balance for our people, enabling us to deliver excellent client service whilst allowing you to build your career without sacrificing your personal priorities. While our client-facing professionals can be required to travel regularly, and at times be based at client sites, our flexible working arrangements can help you to achieve a lifestyle balance.

We offer a competitive remuneration package. Our comprehensive Total Rewards package includes support for flexible working and career development, and with FlexEY you can select benefits that suit your needs, covering holidays, health and well-being, insurance, savings and a wide range of discounts, offers and promotions. Plus, we offer:

• Continuous learning:You’ll develop the mindset and skills to navigate whatever comes next.
  • We recently launched our ground breaking new fully accredited EY Tech MBA by Hult International Business School focused on technology, leadership and business skills; the entire program is delivered online, reflecting wider shift to virtual learning; and most importantly the EY Tech MBA is available to all EY people irrespective of prior qualifications or location.
• Success as defined by you:We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership:We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture:You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

The exceptional EY experience. It’s yours to build.

Apply Now

Please note: Prior to finalizing your application, you will be asked to provide personal information across several dimensions of diversity and inclusiveness. The information you provide is kept entirely confidential and will not be used to evaluate your candidacy. We collect this data to help us analyse our recruitment process holistically and implement actions that promote diversity and inclusiveness. While optional, we encourage you to provide this information to hold us accountable towards our goal of building a better working world. We ask because it matters!

Select how often (in days) to receive an alert:

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.