Technology Risk Manager

Ernst & Young LLP ( EY India ); Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Support and coaching

Career development opportunities

Flexible working options

Job summary

EY’s Technology Risk practice in India seeks a Cross Sector Manager to lead IT risk and assurance engagements, build client relationships, and drive growth in a new service offering.

You'll evaluate control design, manage IT policies, and work with cross-functional teams on risk assessments across ISO27001, NIST, privacy, and cloud controls in a fast-paced consulting environment.

Qualifications

• Graduate with strong IT risk and assurance experience across multiple engagements.
• Experience in applying regulatory standards and control assessments.

Responsibilities

• Evaluate controls for design and operating effectiveness.
• Manage control owners and stakeholders to ensure timely delivery.
• Perform risk assessments including privacy, cyber maturity, and cloud controls.
• Lead IT security and GRC initiatives with cross-functional teams.
• Stay updated on regulatory standards and industry best practices.

Skills

IT risk management

Cybersecurity

Regulatory compliance

Stakeholder management

Project management

Team leadership

Education

Bachelor’s in CS/IT/EE

MBA/MSc (optional)

Tools

ISO27001

NIST

PCI-DSS

HIPAA

Job description

New-Tech Risk Cross Sector Manager

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

New-Tech Risk Cross Sector Manager At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

EY- Technology Risk - Manager

As part of our EY- Consulting Technology Risk team you’ll contribute technically to IT Risk and Assurance client engagements and internal projects. An important part of your role will be to actively establish, maintain and strengthen internal and external relationships. You’ll also identify potential business opportunities for Ernst & Young within existing engagements and elevate these as appropriate. Similarly, you’ll anticipate and identify risks within engagements and share any issues with senior members of the team.

The opportunity

We’re looking for Analyst to join the leadership group of our EY-Technology Risk Team. This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the growth of a new service offering.

Your key responsibilities

• Evaluate a portfolio of controls for design effectiveness, operating effectiveness and/or risk management outcomes, raising issues as appropriate.
• Ensure that assigned control assessments are accurate, effective, abide by policy, procedures, and templates, and meet quality control requirements and are delivered on time, in accordance with the assessment plan.
• Test and supervise the delivery of assigned controls, System Architecture, Operating Systems, Databases, Networks, Security Systems, Cloud Services, Asset Inventories, Incident Management, Recovery Management Perform Cyber Maturity Assessment, Privacy Assessment, Cloud controls assessment, regulatory assessments related to CCPA, NYDFS and GDPR, NIST, NIS2 and DORA reviews, Use experience and knowledge to intervene and redirect testing as required, resolving, or redirecting escalations as required.
• Manage control owners and other stakeholders, ensuring the success of each assigned reviews, minimizing contention where possible and requesting support, where deemed necessary.
• Apply judgement and risk management concepts to identify, formulate findings and provide valuable insights to the clients to improve processes and manage risks to achieving operational and strategic goals.
• Review IT Policies and Standards and ensure that they are as per the different industry standards.
• Work closely with cross-functional teams and develop strong relationships as project lead within IT security and GRC projects.
• Stay current with and promote awareness of applicable regulatory standards, upstream risks and industry best practices across the enterprise.
• Familiar with IT industry frameworks such as ISO27001, NIST, PCI-DSS, FDA, HIPAA: Privacy, HIPAA: Security and HITECH Act.

Skills and attributes for success

• Provide guidance and share knowledge with team members and participate in performing procedures especially focusing on complex, judgmental and/or specialized issues.
• Work with the team and the client to create plans for accomplishing engagement objectives and a strategy that complies with professional standards and addresses the risks inherent in the engagement.
• Maintain relationships with client management to manage expectations of service, including work products, timing, and deliverables.
• Demonstrate a thorough understanding of complex information systems and apply it to client situations.
• Bring and utilize extensive knowledge of the client's business/industry to identify technological developments and evaluate impacts on the client's business.
• Demonstrate excellent project management skills, inspire teamwork and responsibility with engagement team members, and use current technology/tools to enhance the effectiveness of deliverables and services.
• Experience in conducting information security assessments including business continuity plan audits, network security audits, and infrastructure audits.
• Understand EY and its service lines and actively assess what the firm can deliver to serve clients.

To qualify for the role

You must have Graduate (CS/ IT, Electronics, Electronics & Telecommunications,)/MBA/M.Sc. with at least 7 years of experience. Bring your significant experience in applying relevant technical knowledge in at least one of the following engagements: (a) ISO assessments (b) NIST assessments (c) Data privacy audits (d) Network and Infrastructure audits (e) Cyber Maturity Assessment (f) IT Policies and Standards Assessment (g) IAM and IT Asset Management (h) IT Health Check. Ideally, you’ll also have Robust understanding of program and project management practices. Familiarity with a typical IT systems development life cycle.

What we look for

A Team of people with commercial acumen, technical experience, and enthusiasm to learn new things in this fast-moving environment. Opportunities to work with EY Consulting practices globally with leading businesses across a range of industries.

What working at EY offers

At EY, we’re dedicated to helping our clients, from startups to Fortune 500 companies - and the work we do with them is as varied as they are. We get to work with inspiring and meaningful projects. Our focus is education and coaching alongside practical experience to ensure your personal development. We value our employees and you will be able to control your own development with an individual progression plan. You will quickly grow into a responsible role with challenging and stimulating assignments. Moreover, you will be part of an interdisciplinary environment that emphasizes high quality and knowledge exchange.

• Support, coaching and feedback from some of the most engaging colleagues around.
• Opportunities to develop new skills and progress your career.
• The freedom and flexibility to handle your role in a way that’s right for you.

EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.