Senior Consultant, Digital Risk, Risk Consulting

EY; Greater London; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Flexible working arrangements

Total Rewards package

EY Tech MBA by Hult

Job summary

EY in London is seeking a Senior Consultant for Digital Risk to lead client discussions on technology, cyber, and regulatory risks, and to review IT controls across cloud and on‑prem environments. You will develop remediation plans and help clients strengthen governance and resilience while leveraging EY's global resources.

Ideal candidates will have strong analytical skills, experience in risk assessments, and the ability to translate complex risks into actionable recommendations within a

Qualifications

• Knowledge of technology risk frameworks (ISO 27001, NIST, COBIT).
• Understanding of cyber domains such as IAM, cloud security, data protection, and incident response.
• Excellent client-facing and communication skills to translate risks into actionable recommendations.

Responsibilities

• Lead client discussions to assess technology, cyber, and operational risks, translating complex technical issues into clear business impacts.
• Perform detailed reviews of IT controls, cloud environments, data processes, and third‑party risks, identifying gaps and recommending remediation actions.
• Conduct cyber risk assessments across cloud, network, SaaS, and on‑prem environments, identifying vulnerabilities and emerging threats.
• Support clients in enhancing cybersecurity controls such as data protection, incident response, endpoint security, and third‑party cyber oversight.
• Manage workstreams, coordinate junior team members, and ensure high‑quality delivery across assessments, reports, and stakeholder updates.
• Analyse regulatory expectations and industry frameworks to help clients strengthen compliance, resilience, and governance maturity.
• Work with security and IT teams to design pragmatic remediation plans that strengthen resilience, business continuity, disaster recovery and improve compliance posture.
• Drive project momentum by planning activities, tracking risks and dependencies, and supporting clients in implementing practical, risk‑reducing improvements.
• Develop and maintain documentation, reports, and dashboards for risk tracking and compliance monitoring, emphasizing digital risks.
• Lead or contribute to digital risk maturity assessments and process improvement initiatives.

Skills

ISO 27001

NIST

COBIT

IAM

Cloud security

Data protection

Incident response

Job description

Location: London

Other locations: Primary Location Only

Date: 3 Oct 2026

Requisition ID: 1726381

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Our Digital Risk team is dedicated to providing innovative solutions that mitigate risks associated with digital transformation, cybersecurity, and regulatory compliance. The Digital Risk practice is growing rapidly, and we are looking for Senior Consultants to help drive success for our clients by helping them navigate the complexities of the digital landscape.

Responsibilities, Qualifications, Certifications - External

Your key responsibilities

• Lead client discussions to assess technology, cyber, and operational risks, translating complex technical issues into clear business impacts.
• Perform detailed reviews of IT controls, cloud environments, data processes, and third‑party risks, identifying gaps and recommending remediation actions.
• Conduct cyber risk assessments across cloud, network, SaaS, and on‑prem environments, identifying vulnerabilities, misconfigurations, and emerging threats.
• Support clients in enhancing cybersecurity controls such as data protection, incident response, endpoint security, and third‑party cyber oversight.
• Manage workstreams, coordinate junior team members, and ensure high‑quality delivery across assessments, reports, and stakeholder updates.
• Analyse regulatory expectations and industry frameworks to help clients strengthen compliance, resilience, and governance maturity.
• Work with security and IT teams to design pragmatic remediation plans that strengthen resilience, business continuity, disaster recovery and improve compliance posture.
• Drive project momentum by planning activities, tracking risks and dependencies, and supporting clients in implementing practical, risk‑reducing improvements.
• Develop and maintain documentation, reports, and dashboards for risk tracking and compliance monitoring, emphasizing digital risks.
• Lead or contribute to digital risk maturity assessments and process improvement initiatives.

Skills and attributes for success

• Strong analytical and problem‑solving skills, with the ability to assess complex IT environments and identify control, security, and compliance gaps.
• Knowledge of technology risk frameworks (e.g., ISO 27001, NIST, COBIT) and understanding of cyber domains such as IAM, cloud security, data protection, and incident response.
• Excellent client‑facing and communication skills to translate technical risks into clear business impacts and actionable recommendations.
• Project delivery and stakeholder management capabilities, including leading workstreams, mentoring juniors, and ensuring high‑quality outputs under tight timelines.
• Ability to interpret regulatory requirements and translate them into actionable IT, Cyber and Digital controls
• Experience in conducting risk assessments and developing risk mitigation strategies.

What we look for

We are interested to hear from people who are motivated to form a part of a growing team, who embrace diversity and inclusion and who are market‑oriented and ready to help our clients solve and control their biggest issues, risks and regulatory/compliance requirements.

What we offer

EY is committed to being an inclusive employer and we are happy to consider flexible working arrangements. We strive to achieve the right balance for our people, enabling us to deliver excellent client service whilst allowing you to build your career without sacrificing your personal priorities. While our client‑facing professionals can be required to travel regularly, and at times be based at client sites, our flexible working arrangements can help you to achieve a lifestyle balance.

We offer a competitive remuneration package. Our comprehensive Total Rewards package includes support for flexible working and career development, and with FlexEY you can select benefits that suit your needs, covering holidays, health and well‑being, insurance, savings and a wide range of discounts, offers and promotions. Plus, we offer:

• Continuous learning:You’ll develop the mindset and skills to navigate whatever comes next.
  • We recently launched our ground breaking new fully accredited EY Tech MBA by Hult International Business School focused on technology, leadership and business skills; the entire program is delivered online, reflecting wider shift to virtual learning; and most importantly the EY Tech MBA is available to all EY people irrespective of prior qualifications or location.
• Success as defined by you:We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership:We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture:You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

EY | Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.