FS-RISK CONSULTING-ITRM-Senior

Ernst & Young Advisory Services Sdn Bhd; Gurugram District; On-site; INR 1,800,000 - 2,400,000; Full time

Benefits offered by this job

Health and wellness packages

Rewards program

Learning opportunities

Job summary

EY's Global Delivery Services team seeks an experienced GRC Archer Developer with 3–5 years of hands-on expertise in designing, developing, and supporting RSA Archer solutions. The role requires strong knowledge of GRC processes and the Archer data model, with familiarity in SNOW, OpenPages and ProcessUnity as advantageous additions.

You will work on IT risk management projects, lead teams, and collaborate with clients to deliver end-to-end solutions while maintaining clear communication and

Qualifications

• 5-9 years of experience in IT Security / Cyber Security / Cloud Security.
• Experience with IT Risk Management frameworks to identify, analyse, mitigate, monitor and communicate IT risks.
• Draft IT/Cyber risk assessment reports with findings, risks and recommendations.
• Develop KRIs and dashboards for continuous risk monitoring.
• Experience in IT controls validation and testing; identify control deficiencies.

Responsibilities

• Lead IT Risk Management projects as a team lead within ITRM.
• Maintain transparency in communication; highlight risks and mitigation plans.
• Propose solutions to customers based on requirements; good documentation.
• Mentor project resources and ensure timely delivery; regular status reporting.
• Travel to customer locations or EY offices as needed.

Skills

IT Risk Management

GRC Archer

Cloud Security

ISO27001

NIST-CSF

Education

CA / MBA / MCA / MS

BE / B.Tech / MSc with IT security experience

Tools

SNOW

IBM OpenPages

ProcessUnity

Azure

AWS

GCP

Job description

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

About Global Delivery Services

Global Delivery Services refers to EY's worldwide network of service delivery centers. The GDS team plays an important role in EY’s strategy by ensuring effective support to EY’s growth agenda.

Our journey started in 2002 with approximately 200 people. Today we stand at 80,000+ professionals in ten locations around the world. We operate in Argentina, China, Hungary, India, Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom.

Client service is focused on providing Consulting, Assurance, Tax, Strategy & Transactions, and Knowledge support to our clients around the world. The teams enable account teams worldwide to provide seamless, high-quality, value-added support, helping deliver exceptional client service.

Enablement Services provides cost-effective, high-skilled, and innovative services to support EY’s global and local enablement teams. Markets, BMC, AWS, Finance and Accounting, Risk Management, Procurement, People Shared Services, IT Service Delivery and IT Global Infrastructure services, are among the services offered by Enablement Services.

Our innovation specialists serve the GDS Client Service and Enablement Services teams, along with Service Lines, Core Business Services and Sectors. The team brings the desired environment, technologies and skilled teams together for facilitation, rapid prototyping and innovative thinking. The competencies offered include analytics, digital, user experience, mobile technology, infrastructure, Microsoft technologies and open innovation.

The Opportunity

We are seeking an experienced GRC Archer Developer with 3–5 years of hands on experience in designing, developing, and supporting RSA Archer solutions. The ideal candidate should have a strong understanding of GRC processes, the Archer data model, and end to end configuration of use cases. Experience with other GRC tools like SNOW, IBM OpenPages, and ProcessUnity will be considered a strong advantage.

Your Key Responsibilities

• Ability to work as a team lead within IT Risk Management (ITRM) projects
• Right attitude towards teaming, ownership, and knowledge sharing
• Work back with the project team to maintain transparency in communication, highlight risks and share mitigation plan
• Ability to visualise and propose solutions to customers based on the requirements shared
• Help prepare reports and schedules that will be delivered to clients and other parties
• Develop and maintain productive working relationships with client personnel
• Planning and monitoring of the project deliverables for the team
• Mentor the project team in executing the project deliverables
• Regular status reporting to the project manager and onsite coordinators
• Demonstrate flexibility to travel to the customer locations / other EY offices, on need basis
• Good documentation and communication skills

People responsibilities

• Conduct performance reviews and contribute to performance feedback for the team
• Foster teamwork, quality culture and lead by example.
• Understand and follow workplace policies and procedures
• Train and mentor the project resources and team members

Skills and attributes for success

• 5-9 years of experience in the field of IT Security / Information Security / Cyber Security / Cloud Security
• Experience in working with IT Risk Management frameworks to identify, analyse, mitigate, monitor and communicate IT risks
• Conduct risk assessments for process, applications, network infrastructure assets, and vendors
• Draft IT/Cyber risk assessment reports including findings, associated risks and recommendations
• Develop Key Risk Indicators (KRIs) and creating dashboards for continuous monitoring of the risks
• Experience in conducting IT controls validation and testing, and identifying control deficiencies
• Develop IT / Information security policies, standards and procedures
• Experience in working with leading industry standards such as NIST-CSF, ISO27001, ITIL, COBIT, PCI-DSS, CSA-CCM, CCSK, ISO27017, etc.
• Experience working on various cloud platforms such as Azure, AWS, GCP, etc. would be a plus
• Well versed with the security design concepts and should be able to drive discussions for IT risk management along with the customer

Good to Have (Preferred Qualifications)

• Experience in conducting awareness training and workshops on IT Risk Management
• Demonstrated track record with a consulting organization and/or a blue-chip organization
• Demonstrated experience in delivery of engagements and client management
• Relevant professional qualifications such as CA, MBA, MCA, MS
• B.E/B.Tech (Electronics, Electronics & Telecommunications, Comp. Science)/MBA/M.Sc. having experience with other Big3 or panelled IT/ ITeS companies.

Certifications (Preferred)

• Relevant professional certifications such as CISA, CISSP, CRISC, ISO27001, ITIL, COBIT, etc.
• Certifications in Cloud platforms such as Azure, AWS, GCP, etc.

Soft Skills

• Strong communication and stakeholder management skills.
• Ability to work independently as well as in cross functional teams.
• Detail oriented with strong documentation and requirement analysis abilities.
• Ability to manage multiple tasks and deliver within timelines.

What we offer you

At EY, we’ll develop you with future-focused skills and equip you with world-class experiences. We’ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more.

To help create an equitable and inclusive experience during the recruitment process, please inform us as soon as possible about any disability‑related adjustments or accommodations you may need.

Our Commitment:

As a commitment, we persistently endeavour to embody our values, fulfil our purpose, and champion inclusiveness. Our dedication is to cultivate EY into an environment where diverse perspectives are celebrated, creating a supportive atmosphere for individuals to authentically be themselves and contribute their utmost.

Professional Development:

From entry-level employees to senior leaders, we believe in continuous learning. We offer opportunities to build new skills, take on leadership roles, and connect and grow through mentorship.

People and Culture:

In our dynamic workplace, diversity, equity, and inclusiveness are ingrained in our culture. We're united by a commitment to create an environment where every individual's differences are valued, practices are equitable, fostering a sense of belonging. Our shared values include integrity, respect, teaming, inclusiveness, energy, enthusiasm, courage to lead, and building relationships based on doing the right thing.

Benefits:

Embark on a transformative career journey with us and indulge in a suite of premium benefits, encompassing exclusive health and wellness packages, enticing rewards, and cutting‑edge learning opportunities that empower you to continually grow and excel in your professional and personal development.

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.