Risk Consulting expert

EY; Coimbatore District; On-site; INR 600,000 - 900,000; Full time

Job summary

EY in Coimbatore, Tamil Nadu, is seeking Staff to work across operational resilience, technology risk, cyber risk, compliance, and governance. You will support engagement delivery, conduct assessments, gather evidence, and coordinate with global teams to enhance resilience and compliance postures.

The role offers exposure to ISO 22301, ISO 27001, NIST CSF, DORA, CPS 230, and NIS2 frameworks, and opportunities to develop expertise while delivering client-ready outputs with quality and integrity.

Qualifications

• Foundational understanding of operational resilience, BCM, DR, crisis management, and cyber resilience.
• Basic understanding of risk management, governance, controls, and regulatory compliance principles.
• Awareness of frameworks such as ISO 22301, ISO 27001, NIST CSF, DORA, CPS 230, and NIS2.
• Ability to document observations, write reports, and support client deliverables.
• Willingness to work in a collaborative, global team and develop expertise across domains.

Responsibilities

• Support operational resilience, business continuity, disaster recovery, cyber resilience, and compliance assessments.
• Assist in conducting Business Impact Analyses (BIA) and dependency mapping.
• Support reviews of resilience programs against ISO 22301, ISO 27001, NIST CSF, DORA, CPS 230, NIS2.
• Participate in control testing, evidence reviews, and assurance activities.
• Gather, validate, and document evidence to support assessment conclusions.
• Assist in evaluating business continuity, disaster recovery, crisis management, and resilience testing programs.
• Support assessments of critical processes, systems, assets, and third-party providers.
• Engage in stakeholder interviews, workshops, and process walkthroughs.
• Identify observations, risks, and opportunities under senior guidance.
• Assist in preparing reports, presentations, and engagement documents.
• Support project coordination, status tracking, and quality reviews.

Skills

Operational Resilience

Business Continuity

Disaster Recovery

Regulatory Compliance

GRC

Cyber Risk

Cyber Resilience

Critical Business Services

Stakeholder coordination

Documentation & Reporting

AI awareness

Job description

The Opportunity

We are expanding our Resilience, Compliance & Cyber team and are looking for Staff with an interest in operational resilience, technology risk, cyber risk, compliance, and governance domains. We welcome candidates with foundational knowledge and academic or practical exposure across one or more of the following areas:

• Operational Resilience and Business Continuity Management (BCM)
• Disaster Recovery (DR) and Technology Resilience
• Regulatory Compliance and Controls Assurance
• Governance, Risk and Compliance (GRC)
• Cyber Risk and Cyber Resilience
• Critical Business Services, Asset, and Dependency Assessments

Staff will support engagement delivery through research, testing preparations, evidence collection, documentation, analysis, and stakeholder coordination while working closely with Seniors and Managers. This role provides an excellent opportunity to build expertise in resilience, compliance, technology risk, and cyber resilience while supporting global client engagements.

Your Key Responsibilities

• Support operational resilience, business continuity, disaster recovery, cyber resilience, and compliance assessments.
• Assist in conducting Business Impact Analyses (BIA), critical business service reviews, and dependency mapping activities.
• Support reviews of resilience and compliance programs against applicable frameworks and regulations, including ISO 22301, ISO 27001, NIST CSF, DORA, CPS 230, and NIS2.
• Participate in control testing, evidence reviews, walkthroughs, and assurance activities.
• Gather, validate, and document evidence to support assessment conclusions and client deliverables.
• Assist in the evaluation of business continuity, disaster recovery, crisis management, incident management, and resilience testing programs.
• Support assessments of critical processes, systems, assets, third-party providers, and operational dependencies.
• Participate in stakeholder interviews, workshops, and process walkthroughs.
• Identify observations, risks, and improvement opportunities under the guidance of senior team members.
• Assist in preparing reports, presentations, management summaries, and engagement documentation.
• Support project coordination activities, status tracking, and quality review procedures.
• You will be responsible for executing tasks with increasing autonomy, applying sound judgment within defined parameters, and contributing to team outcomes. You are expected to demonstrate initiative, resolve routine issues independently, and support junior colleagues.
• You will anticipate and identify risks within engagement and share any issues with senior members of the team.
• In line with EY commitment to quality, you'll confirm that work is of high quality and is reviewed by the next-level reviewer.

Skills and attributes for success

• Foundational understanding of Operational Resilience, Business Continuity Management (BCM), Disaster Recovery (DR), Crisis Management, and Cyber Resilience concepts.
• Basic understanding of risk management, governance, controls, and regulatory compliance principles.
• Awareness of resilience and compliance frameworks such as ISO 22301, ISO 27001, NIST CSF, DORA, CPS 230, and NIS2.
• Understanding of concepts such as Business Impact Analysis (BIA), Recovery Time Objectives (RTO), Recovery Point Objectives (RPO), critical business services, and dependency mapping.
• Strong analytical and problem-solving capabilities.
• Good documentation, communication, and report-writing skills.
• Ability to manage assigned tasks and deliver high-quality work within agreed timelines.
• Strong attention to detail and commitment to quality.
• Ability to work collaboratively within global and cross-functional teams.
• Interest in developing expertise across resilience, compliance, cyber risk, and technology risk domains.
• Demonstrate AI awareness and proficiency by leveraging approved AI tools to enhance productivity, improve decision-making, and drive innovation while ensuring responsible, ethical, and secure use of AI technologies.