Risk Consulting / Digital Risk / Cyber Risk Senior

EY; New York (NY); On-site; USD 88,000 - 183,000; Full time

Job summary

EY is seeking a Cyber Risk professional in the United States to identify, evaluate, and manage cyber risks across client organizations. You will lead fieldwork, collaborate with IT and security teams, and ensure controls align with business goals and regulatory requirements.

The role emphasizes risk assessments, mitigation strategies, and effective communication with senior management. Travel ~50% and passport required, with opportunities to work across multiple regions.

Qualifications

• A bachelor's or master's degree.
• Bachelor's degree in Information Technology, Cybersecurity, Risk Management, or a related field.
• Professional certifications such as CISSP, CISM, CRISC, or similar are highly desirable.
• Minimum of 2 years of experience in cybersecurity, risk management, or a related role.
• Strong understanding of cybersecurity frameworks (e.g., NIST, ISO 27001) and regulatory requirements.
• Proven experience in risk assessment methodologies and tools.
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills, with the ability to convey complex information to non-technical stakeholders.
• Ability to work independently and as part of a team in a fast-paced environment.
• Travel outside assigned office location at least 50% of the time, plus commute within the region.
• Passport required.

Responsibilities

• Lead fieldwork and manage staff during information systems control engagements.
• Analyze business processes dependent on IT and document engagement status.
• Perform IT control and security engagements with Risk Assurance professionals.
• Identify and communicate cyber risks and control weaknesses to clients.

Skills

Engagement planning

Project management

Team leadership

Cyber risk assessment

Cybersecurity knowledge

Communication skills

Analytical thinking

Independent work

Education

Bachelor's or master's degree

IT/Cybersecurity/Risk Mgmt degree

Certifications desired (CISSP/CISM/CRISC)

Tools

Risk assessment tools

IT security frameworks (NIST/ISO27001)

Job description

Location: New York

Other locations: Anywhere in Region

Requisition ID: 1756926

Location: New York, Atlanta, Boston, Charlotte, Chicago, Cleveland, Dallas, Detroit, Hoboken, Houston, Los Angeles, McLean, Miami, Philadelphia, Portland, San Francisco, Seattle

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

The opportunity

The objective of our consultingrisk services is to provide clients with a candid and reliable overview of their risk landscape. Our solutions can be used by our clients to build confidence and trust with their customers, the overall market and when required by regulation or contract.

For our Cyber Risk services, the ideal candidate will be responsible for identifying, evaluating, and managing cyber risks across the organization. This role involves working closely with IT, security teams, and business units to ensure that our cyber risk posture is aligned with our business objectives and regulatory requirements.

Your key responsibilities

You will operate as a fieldwork leader to assist clients in employing proper information systems, resources, and controls to maximize efficiencies and minimize risk. You can expect to work with client personnel to analyze, evaluate, and enhance information systems facilitating the business internal control process, and will assist clients and other Risk Assurance professionals in performing information technology control and security engagements.

Skills and attributes for success

• Collaborate with other members of the engagement team to plan the engagement and develop work program timelines, risk assessments, and other planning documents. Work with the engagement team to document the business processes dependent on information technology. Serve as a fieldwork leader by directing the daily progress of fieldwork, informing supervisors of engagement status, and managing staff performance.
• Demonstrate and apply a thorough understanding of complex information systems. Use knowledge of the current IT environment and industry IT trends to identify the engagement and client serviceissues,andcommunicate this information to the engagement team and client management through written correspondence and verbal presentations. Demonstrate and apply strong project management skills, inspire teamwork and responsibility with engagement team members, and use current technology and tools to enhance the effectiveness of deliverables and services.
• Conduct comprehensive cyber risk assessments to identify vulnerabilities, threats, and potential impacts to the organization.
• Develop and implement risk mitigation strategies and controls to protect against cyber threats.
• Collaborate with IT and security teams to ensure that cybersecurity policies and procedures are up-to-date and effectively implemented.
• Monitor the cyber threat landscape and provide timely intelligence to relevant stakeholders.
• Facilitate risk management discussions with business leaders to ensure they understand their cyber risk exposure.
• Oversee the cyber risk management lifecycle, including risk identification, analysis, response, and monitoring.
• Coordinate with external partners, such as insurance providers and cybersecurity firms, to manage and transfer cyber risks where appropriate.
• Prepare and present risk reports and dashboards to senior management and the board of directors.
• Ensure compliance with relevant laws, regulations, and industry standards related to cybersecurity and data protection.
• Conduct training and awareness programs to promote a culture of cybersecurity across the organization.

To qualify for the role you must have:

• A bachelor's or master's degree
• Bachelor's degree in Information Technology, Cybersecurity, Risk Management, or a related field.
• Professional certifications such as CISSP, CISM, CRISC, or similar are highly desirable.
• Minimum of 2 years of experience in cybersecurity, risk management, or a related role.
• Strong understanding of cybersecurity frameworks (e.g., NIST, ISO 27001) and regulatory requirements.
• Proven experience in risk assessment methodologies and tools.
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills, with the ability to convey complex information to non-technical stakeholders.
• Ability to work independently and as part of a team in a fast-paced environment.
• We would expect for you to be available to travel outside of their assigned office location at least 50% of the time, plus commute within the region (where public transportation often is not available).
• Successful candidates must work in excess of standard hours when necessary. A valid passport is required.

Ideally, you’ll also have :

• A bachelor's or master's degree in business, accounting, finance, computer science, information systems, engineering, or a related discipline
• CPA, CA, CISA, CISSP, CISM, CBCP, CIA, CIPP, CGEIT certification is desired; non-certified hires are required to become certified to be eligible for promotion to Manager.
• Additional cloud-based certifications to credentialize but do not currently meet the rigor of the certification requirement above:
• CCSP – Certified Cloud Security Professional
• CCSK – Certificate of Cloud Security Knowledge
• CCAK – Certificate of Cloud Auditing Knowledge

What we look for

We’re looking for passionate leaders with strong vision and a desire to stay on top of trends in the risk industry. If you have a genuine passion for helping businesses achieve their full potential, this role is for you

What we offer you
At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers .

• The salary range for this job is:
  • New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $105,400 to $175,400
  • Bay Area California offices – $109,700 to $182,800
  • All other offices locations in the US, including Sacramento – $87,800 to $160,900
• Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.

EY | Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

All in to shape the future with confidence.

EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.

EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY’s Talent Shared Services Team (TSS) or email the TSS at [e-mail] .

Select how often (in days) to receive an alert:

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.