Risk Consulting - Digital Risk -Manager- Resilience - Compliance - Cyber

EY; Gurugram District; Presencial; INR 1.500.000 - 2.300.000; Jornada completa

Descripción de la vacante

EY in India seeks a Manager in Risk Consulting – Digital Risk to lead resilience engagements across operational resilience, BCM, and cyber risk. You will manage multi-workstream teams, oversee BIA and dependency mapping, and assess adherence to major regulatory standards.

Role requires strong advisory skills, client relationship management, and the ability to drive remediation and assurance across complex engagements.

Formación

• Bachelor's or Master's degree in Information Security, Cyber Security, Technology Risk, Risk Management, Business Continuity, Information Systems, Computer Science, or related field.
• 5-8 years of experience in Operational Resilience, BCM, Disaster Recovery, Technology Risk, Cyber Security, Compliance, Internal Audit, or consulting.
• Experience leading resilience assessments and multi-workstream delivery teams.

Responsabilidades

• Lead resilience engagements across operations, cyber resilience, and regulatory compliance.
• Oversee BIA, critical service identification, and dependency mapping.
• Assess resilience against DORA, CPS 230, NIS2, ISO 22301/27001, and NIST standards.
• Review programs for continuity, disaster recovery, crisis management, and incident response.
• Manage engagement teams across multiple workstreams; ensure quality and risk controls.
• Facilitate executive workshops, governance forums, and client updates.

Conocimientos

Operational Resilience

BCM

Disaster Recovery

Crisis Management

Cyber Resilience

Technology Risk

Educación

Bachelor's or Master's in Information Security / IT Risk

Descripción del empleo

Job Description:

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Risk Consulting – Digital Risk – Manager:

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

About Global Delivery Services

Global Delivery Services refers to EY's worldwide network of service delivery centers. The GDS team plays an important role in EY’s strategy by ensuring effective support to EY’s growth agenda.

Our journey started in 2002 with approximately 200 people. Today we stand at 80,000+ professionals in ten locations around the world. We operate in Argentina, China, Hungary, India, Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom.

Client service is focused on providing Consulting, Assurance, Tax, Strategy & Transactions, and Knowledge support to our clients around the world. The teams enable account teams worldwide to provide seamless, high-quality, value-added support, helping deliver exceptional client service.

Enablement Services provides cost-effective, high-skilled, and innovative services to support EY’s global and local enablement teams. Markets, BMC, AWS, Finance and Accounting, Risk Management, Procurement, People Shared Services, IT Service Delivery and IT Global Infrastructure services, are among the services offered by Enablement Services.

Our innovation specialists serve the GDS Client Service and Enablement Services teams, along with Service Lines, Core Business Services and Sectors. The team brings the desired environment, technologies and skilled teams together for facilitation, rapid prototyping and innovative thinking. The competencies offered include analytics, digital, user experience, mobile technology, infrastructure, Microsoft technologies and open innovation.

The Opportunity

We are expanding our Resilience, Compliance & Cyber practice and are looking for Managers with strong experience across operational resilience, technology risk, regulatory compliance, and cyber risk domains, with targeted expertise across:

• Operational Resilience and Business Continuity Management
• Disaster Recovery and Technology Resilience
• Regulatory Compliance and Controls Assurance
• Technology Governance, Risk and Compliance (GRC)
• Cyber Risk and Cyber Resilience
• Critical Business Services, Asset, and Dependency Assessments

Managers will lead multi-workstream engagements, manage teams across global delivery models, oversee quality and risk management, and serve as trusted advisors to clients. The role requires balancing delivery excellence, stakeholder management, team leadership, and business development while helping organizations strengthen resilience capabilities and meet evolving regulatory expectations.

Your Key Responsibilities

Client Delivery

• Lead operational resilience, business continuity, disaster recovery, cyber resilience, and regulatory compliance engagements.
• Oversee Business Impact Analysis (BIA), critical business service identification, impact tolerance assessments, and dependency mapping activities.
• Assess organizational resilience capabilities against leading regulations and frameworks including DORA, CPS 230, NIS2, ISO 22301, ISO 27001, NIST CSF, and NIST 800-series guidance.
• Review and challenge business continuity, disaster recovery, crisis management, operational resilience, and incident response programs.
• Evaluate critical assets, technology services, third-party providers, operational dependencies, and recovery capabilities supporting essential business operations.
• Assess recovery strategies, resilience controls, Recovery Time Objectives (RTOs), Recovery Point Objectives (RPOs), and testing effectiveness.
• Lead resilience testing, tabletop exercises, severe-but-plausible scenario assessments, and simulation activities.
• Oversee control testing, assurance reviews, evidence validation, and regulatory readiness assessments.
• Identify resilience, cyber, and compliance gaps and develop pragmatic remediation strategies aligned to business objectives.
• Present findings and recommendations to client leadership and executive stakeholders.
• Manage day-to-day client relationships, leading client meetings, working sessions, and status reporting.

Project & Team Management

• Manage engagement teams comprising Senior Consultants and Consultants across multiple concurrent workstreams.
• Build and monitor project plans, budgets, timelines, resource allocation, and delivery milestones.
• Review assessment outputs, reports, and client deliverables to ensure quality, consistency, and compliance with EY methodologies.
• Facilitate stakeholder workshops, steering committee discussions, governance forums, and executive updates.
• Coach, mentor, and develop team members to strengthen technical and consulting capabilities.
• Manage engagement risks, dependencies, issues, and escalation activities to support successful delivery.
• Promote knowledge sharing, capability development, and continuous improvement across the practice.

Business Development

• Support proposal development, RFP responses, pricing activities, credential development, and client pursuits.
• Contribute to thought leadership, market propositions, and resilience-focused service offerings.
• Develop and enhance methodologies, accelerators, assessment frameworks, and reusable assets.
• Identify opportunities for cross-service collaboration across Risk Consulting, Cybersecurity, Technology Risk, and Regulatory Compliance teams.
• Support account growth initiatives and relationship management activities.

Skills And Attributes For Success

• Strong understanding of Operational Resilience, Business Continuity Management (BCM), Disaster Recovery (DR), Crisis Management, Technology Resilience, and Cyber Resilience.
• Experience leading Business Impact Analysis (BIA), critical business service assessments, critical asset assessments, dependency mapping, and resilience testing programs.
• Strong working knowledge of DORA, CPS 230, NIS2, ISO 22301, ISO 27001, NIST CSF, and NIST 800-series guidance.
• Understanding of impact tolerances, severe-but-plausible scenarios, resilience testing methodologies, and operational resilience regulatory requirements.
• Ability to assess operational, cyber, technology, and third-party risks affecting business resilience.
• Strong consulting, stakeholder management, workshop facilitation, and executive communication skills.
• Demonstrated ability to lead complex engagements and manage globally distributed teams.
• Strong analytical and problem-solving capabilities with the ability to translate technical findings into business-focused recommendations.
• Experience managing project delivery, budgets, quality reviews, and engagement risks.
• High attention to quality, client service excellence, and continuous improvement.
• Demonstrate AI awareness and proficiency by leveraging approved AI tools to enhance productivity, improve decision-making, and drive innovation while ensuring responsible, ethical, and secure use of AI technologies.
• Champion a growth mindset toward emerging technologies by continuously building AI capabilities, identifying opportunities for AI-driven transformation, and promoting AI adoption and best practices within teams and client engagements.

To Qualify for the Role, You Must Have

• Bachelor's or Master's degree in Information Security, Cyber Security, Technology Risk, Risk Management, Business Continuity, Information Systems, Computer Science, or a related field.
• 5-8 years of experience in Operational Resilience, Business Continuity Management, Disaster Recovery, Technology Risk, Cyber Security, Compliance, Internal Audit, or consulting engagements.
• Experience leading resilience assessments, BCM programs, regulatory compliance reviews, disaster recovery initiatives, cyber resilience engagements, or technology risk assessments.
• Experience facilitating executive stakeholder discussions and leading multi-workstream delivery teams.
• Strong understanding of resilience, risk management, and compliance frameworks including NIST CSF, ISO 22301, ISO 27001, DORA, CPS 230, NIS2, and related industry standards.
• Experience performing and reviewing Business Impact Analysis (BIA), critical business services assessments, critical asset identification, dependency mapping, resilience testing, recovery strategy reviews, and controls assurance activities.
• Experience defining, reviewing, or validating resilience metrics, recovery objectives (RTO/RPO), and testing outcomes.

Ideally, You’ll Also Have

• ISO 22301 Lead Auditor (LA) / Lead Implementer (LI) - Business Continuity Management Systems (BCMS)
• ISO 27001 Lead Auditor (LA) / Lead Implementer (LI) - Information Security Management Systems (ISMS)
• ISO 31000 Risk Management
• CRISC (Certified in Risk and Information Systems Control)
• CISA (Certified Information Systems Auditor)
• Experience supporting DORA, CPS 230, NIS2, or other operational resilience regulatory programs.
• Experience leading resilience initiatives within Banking, Insurance, Asset Management, Healthcare, Critical Infrastructure, or other regulated industries.
• Experience assessing third-party resilience, concentration risk, outsourcing risk, and critical service provider arrangements.
• Experience managing global delivery teams and working in onshore-offshore delivery models.
• Proven experience in direct client facing roles, partnering with cross functional teams to deliver assessment and remediation activities.
• Prior Big 4 or consulting leadership experience.

What We Offer You

• Our Commitment: As a commitment, we persistently endeavour to embody our values, fulfil our purpose, and champion inclusiveness. Our dedication is to cultivate EY into an environment where diverse perspectives are celebrated, creating a supportive atmosphere for individuals to authentically be themselves and contribute their utmost.
• Professional Development: From entry-level employees to senior leaders, we believe in continuous learning. We offer opportunities to build new skills, take on leadership roles, and connect and grow through mentorship.
• People and Culture: In our dynamic workplace, diversity, equity, and inclusiveness are ingrained in our culture. We're united by a commitment to create an environment where every individual's differences are valued, practices are equitable, fostering a sense of belonging. Our shared values include integrity, respect, teaming, inclusiveness, energy, enthusiasm, courage to lead, and building relationships based on doing the right thing.
• Benefits: Embark on a transformative career journey with us and indulge in a suite of premium benefits, encompassing exclusive health and wellness packages, enticing rewards, and cutting-edge learning opportunities that empower you to continually grow and excel in your professional and personal development.

Successful candidates advance to a competency-based interview. If mutual interest persists, a job offer awaits.

“We are an equal opportunity employer and are committed to Diversity, Equity & Inclusion”.

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

Requirements: