EY GDS Consulting – MS RSS (Managed Services – Risk & Support Services) – Senior

EY GDS Consulting – MS RSS (Managed Services – Risk & Support Services) – Senior

The opportunity

We’re looking for Seniors with expertise in Third-Party Risk Management to join the leadership group of our MS- RSS Team. It is a fantastic opportunity to be part of a leading firm while being instrumental in the growth of a new service offering.

As part of our EY- Risk Management team, you will help clients enhance their business performance by translating their strategies into realities. Working with EY-high performing teams, you will help clients to grow, innovate, protect, and optimize their business performance.

Your key responsibilities

• Lead end-to-end delivery of Third-Party Risk Management (TPRM) engagements.
• Lead the design and implementation of TPRM operating models, identifying, evaluating, and providing solutions to evaluate complex business and technology risks.
• Follow policies and procedures that support the successful implementation of TPRM operating models.
• Facilitate process walkthrough discussions to document end-to-end business processes and functional requirements.
• Assess the application of legal and regulatory requirements to clients TPRM practices.
• Lead in technology enhancement requirements such as Automation, Data Analytics, AI to support TPRM processes.
• Drive automation, data analytics, and AI-enabled enhancements.
• Demonstrate a general knowledge of market trends, competitor activities, EY products, and service lines.
• Manage client relationships and stakeholder expectations
• Contribute to Identifying opportunities to improve engagement profitability.
• Assist leadership in driving business development initiatives and account management.
• Mentor and coach junior team members

Skills and attributes for success

• Strong expertise in TPRM and Risk Management frameworks
• Advanced analytical and problem-solving capabilities
• Strong stakeholder management and communication skills
• Leadership and mentoring capability
• Ability to work in a fast-paced consulting environment

To qualify for the role, you must have

• 4 to 8 years of demonstrated experience with Risk Management across the Third-Party engagement lifecycle (pre-contracting, contracting, and post contracting) and an understanding of the associated organizational infrastructure (e.g., relevant internal controls, business processes, governance structures).
• Strong understanding of the TPRM framework, Risk Management, Information Security practices.
• Demonstrate a good understanding of the Contract Risk Review management process.
• Hands-on exposure to TPRM tools and technology solutions (e.g., GRC enablement solutions, such as Process Unity, Prevalent, Archer, ServiceNow, etc.).
• Demonstrated knowledge of standards such as ISO 27001/2, ISO 22301, ISO 27018, PCI – DSS, HITRUST, etc.
• Good knowledge of privacy regulations such as GDPR, CCPA, etc.
• Good knowledge of regulations such as FISMA, HIPAA, Reg SCI, MAS, etc.
• Good knowledge of TCP/IP, concepts of OSI layer and protocols, networking and security concepts, Physical & Environmental Security, Asset Security and Identity & Access Management.
• Good knowledge of OS (Windows / Linux) security, Database security, IT infrastructure (switches, routers, firewalls, IDS, IPS, etc.), Security architecture design, and review.
• Good familiarity with OWASP, and Secure SDLC standards/frameworks, anti-virus solutions (e.g., Symantec, McAfee, etc.).
• Good experience in LAN/WAN architectures and reviews.
• Good knowledge of incident management, disaster recovery, and business continuity management, cryptography.
• Good to have prior Big-4 experience.

Certifications (Preferred)

• CISSP, CISA, CISM, CTPRP, CIPP, ISO 27001 Lead Auditor or Lead Implementer

Ideally, you’ll also have

• Project Management skills.
• Exposure to tools like ProcessUnity, ServiceNow, Archer.

What we look for

• A Team of people with enthusiasm to develop new skills and knowledge and experience to succeed and inquisitiveness to learn new things in this fast-moving environment.
• Actively tracks and communicates engagement performance and planning to EY engagement management, ensuring project milestones remain on track and are completed timely.
• Actively mentors and trains team members on Third-Party Risk Management processes, governance, and frameworks.
• Works cross-functionally with team members to support and drive a collaborative team environment.
• Creates and design effective presentations as a means for communicating project and deliverable progress to clients.
• Performs sophisticated data analyses to understand client s business and identify risk
• Executes advanced services and supervise staff in delivering essential services.
• Understands client s business environment and basic risk management approaches
• Actively participates in decision making with engagement management and seek to understand the broader impact of current decisions.
• Actively contributes to improving operational efficiency on projects & internal initiatives.

What we offer you At EY, we’ll develop you with future-focused skills and equip you with world-class experiences. We’ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more.

Our Commitment: As a commitment, we persistently endeavour to embody our values, fulfil our purpose, and champion inclusiveness. Our dedication is to cultivate EY into an environment where diverse perspectives are celebrated, creating a supportive atmosphere for individuals to authentically be themselves and contribute their utmost. Professional Development: From entry-level employees to senior leaders, we believe in continuous learning. We offer opportunities to build new skills, take on leadership roles, and connect and grow through mentorship. People and Culture: In our dynamic workplace, diversity, equity, and inclusiveness are ingrained in our culture. We're united by a commitment to create an environment where every individual's differences are valued, practices are equitable, fostering a sense of belonging. Our shared values include integrity, respect, teaming, inclusiveness, energy, enthusiasm, courage to lead, and building relationships based on doing the right thing. Benefits: Embark on a transformative career journey with us and indulge in a suite of premium benefits, encompassing exclusive health and wellness packages, enticing rewards, and cutting-edge learning opportunities that empower you to continually grow and excel in your professional and personal development.