Risk Consulting - Digital Risk (Cloud, AI, & Platforms) - TMT Sector - Senior Consultant - Bay Area

EY; San Mateo (CA); On-site; USD 131,000 - 219,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off

Job summary

EY seeks a Senior Consultant in Digital Risk in the San Francisco Bay Area to support risk and compliance across cloud-native ecosystems. You will work with engagement teams to design and implement scalable, audit-ready controls within modern technology environments.

Qualifications include 3+ years in IT risk or technology consulting, cloud platforms (AWS), microservices, and SDLC/PDLC exposure. Travel up to 50% is expected, with extended hours as needed.

Qualifications

• Bachelor’s or master’s degree in business, accounting, computer science, engineering, or a related field.
• Minimum 3 years IT risk, Digital Risk, or technology consulting experience with exposure to TMT clients or tech environments.
• Hands-on experience or exposure to cloud platforms (e.g., AWS or similar environments).
• Experience with microservices, distributed architectures, DevOps/CI/CD, SDLC/PDLC.
• Experience supporting IT general controls, risk assessments, control testing, and cloud-based environments.
• Willingness to travel at least 50%, including client-site travel; extended hours may be required.

Responsibilities

• Execute risk assessments, control design, and testing across cloud platforms and AI-enabled environments.
• Collaborate with client IT, engineering, and business teams to deliver outputs.
• Document IT controls, processes, and system environments with completeness and quality.
• Design and evaluate controls across DevOps, CI/CD, SDLC/PDLC, and distributed platforms.
• Identify and assess risks within AI-enabled development environments and automated workflows.
• Manage tasks and deliverables, maintaining deadlines and quality.

Skills

Cloud platforms

Microservices

DevOps & CI/CD

PDLC/SDLC

IT risk & SOX

Education

Bachelor’s or Master’s degree in business, accounting, CS, engineering, or related field

Tools

AWS

Job description

Location: San Francisco, San Jose, and San Mateo

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

The opportunity

EY’s Digital Risk practice is supporting leading Technology, Media & Telecommunications (TMT) companies as they scale cloud-native, AI-enabled, and platform-based operating models. Based in San Francisco, this role provides the opportunity to work with high-growth and global technology organizations operating on microservices architectures and AI-driven engineering environments.

We are seeking a Senior Consultant to support risk, compliance, and control activities across modern, highly automated technology ecosystems. This role requires a strong foundation in SOX, cloud environments, and software development practices, including exposure to AI-assisted development and product development lifecycles (PDLC/SDLC).

You will work with engagement teams and client stakeholders to support the design, assessment, and implementation of scalable, audit-ready risk and compliance frameworks within complex technology environments.

Your Key Responsibilities

As a Senior Consultant in our Digital Risk practice, you will contribute to the delivery of Digital Risk engagements, executing key activities across workstreams and supporting overall engagement objectives in cloud-native environments. You will work closely with Managers and Senior Managers, as well as client stakeholders, to deliver risk and control solutions within modern technology ecosystems.

In this role, you will:

• Execute activities across cloud platforms, microservices architectures, and AI-enabled development environments, including risk assessments, control design, and testing
• Support engagement teams by working with client stakeholders (e.g., IT, engineering, and business teams) to deliver clear, accurate, and actionable outputs
• Perform analysis and documentation of IT controls, processes, and system environments, ensuring completeness and quality of deliverables
• Contribute to the design and evaluation of controls across DevOps, CI/CD pipelines, SDLC/PDLC processes, and distributed platforms, including APIs, microservices, and data environments
• Support identification and assessment of risks within AI-enabled development environments and automated engineering workflows
• Manage individual tasks and deliverables, maintaining accountability for deadlines, quality, and attention to detail

Skills And Attributes For Success

Demonstrate foundational understanding of cloud-native architectures, distributed systems, and modern engineering practices, and apply that knowledge to support control assessments and risk analysis.

Exhibit an AI-aware mindset, recognizing risks associated with AI-assisted development and automation within engineering workflows. Demonstrate developing architecture fluency, with the ability to interpret system components, data flows, and dependencies.

Build credibility with engineering, DevOps, and data teams, collaborating effectively within technical environments. Apply knowledge of TMT sector operating models to understand evolving risk considerations.

Communicate clearly and effectively, translating technical concepts into structured and understandable outputs for engagement teams and client stakeholders.

Operate with strong attention to detail, organization, and accountability, managing multiple priorities while contributing to high-quality deliverables.

To qualify for the role you must have:

• A bachelor’s or master’s degree in business, accounting, computer science, engineering, or a related field
• A minimum of 3 years of experience in IT risk, Digital Risk, or technology consulting, with exposure to TMT sector clients or technology environments
• Hands‑on experience or exposure to:
  • Cloud platforms (e.g., AWS or similar environments)
  • Microservices and distributed architectures
  • DevOps and CI/CD pipelines
  • Software development lifecycles (SDLC/PDLC)
• Experience supporting:
  • IT general controls (ITGCs) and automated control environments
  • Risk assessments, control testing, and documentation activities
  • Engagements involving cloud‑based or distributed technology systems
• Basic understanding of how control frameworks (e.g., SOX, internal controls) apply within modern technology environments
• Exposure to data platforms and AI‑enabled development environments is a plus
• Willingness to travel at least 50%, including client‑site travel. Flexibility to work extended hours as needed

Ideally, you’ll also have:

Relevant certifications (or progress toward) such as CISA, CPA, or cloud certifications (e.g., AWS)

What We Look For

We’re looking for individuals who are interested in building their experience at the intersection of risk, engineering, and technology, and who are motivated to develop technical capabilities within modern, evolving environments.

The right candidate is detail‑oriented, dependable, and able to work through complex problems while collaborating effectively with both technical and business stakeholders.

A proactive mindset, willingness to learn, and ability to deliver high‑quality, consistent outputs in fast‑paced environments…

What We Offer You

At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers.

• The salary range for this job is:
  • New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $125,800 to $209,700
  • Bay Area California offices – $131,100 to $218,500
  • All other offices locations in the US, including Sacramento – $104,800 to 192,200
• Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.

EY | Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi‑disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

All in to shape the future with confidence.

EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.

EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities.