Risk Consulting - Risk Technology - GRC/IRM Platforms - Manager

About the role

The risk landscape is continuously evolving due to market volatility, geopolitical crises, economic changes, regulatory reforms, and cyber threats. Organizations are increasingly seeking to establish, mature, and optimize risk and compliance activities to manage risk more efficiently and effectively, including providing greater visibility to risks – enabling decision-making. As risk and compliance programs evolve, organizations are focused on greater value from those functions that drive cost savings, efficiency, and insights. Clients are no longer seeking isolated technology implementations to enable their programs. They are looking for end-to-end Risk solutions that integrate risk processes, data, and technology to simplify governance, automate compliance, and deliver forward-looking risk intelligence.

Responsibilities

• Help clients assess, design, and implement integrated risk management solutions that leverage leading GRC platforms (e.g., ServiceNow IRM, Archer, AuditBoard), EY risk solutions and intellectual property, data and analytics capabilities, and emerging technologies.
• Bring functional, technical, deep domain knowledge and strong architectural thinking to help clients achieve measurable business outcomes.
• Grow both personally and professionally as a result of working for a global, multi-disciplinary consulting firm in which you will have the opportunity to work across sectors, competencies, and with resources of a diverse background to solve our clients’ challenges or realize their business objectives.
• Operate at the intersection of risk, technology, data, AI and innovation, while leading a wide array of projects to drive client value creation.
• Lead and coach team members, both onshore and offshore, including developing both functional and technical skillsets required to address our client’s evolving needs.
• Support business development activities ranging from responding to proposals to fostering relationships and setting the stage for the next phases of work or opportunities.
• Manage projects end-to-end working directly with our clients, including overseeing the day-to-day execution and interactions between our EY and client teams.

Qualifications

• A bachelor's degree in Computer Science, Information Systems, Business, Finance, Accounting, Engineering, or a related field and 5 years of experience implementing ServiceNow IRM, TPRM, or BCM solutions/use cases.
• Alternatively, a Master's degree in Computer Science, Information Systems, Business, Finance, Accounting, Engineering, or a related field and 4 years of work experience implementing ServiceNow IRM, TPRM, or BCM solutions/use cases.
• Certification from ServiceNow as a Certified System Administrator (CSA) and having completed the training and certification for GRC Fundamentals (or other relevant certifications such as GRC Implementation, Third Party Risk Management, Business Continuity Management, Flow Design, UI Builder, Performance Analytics).
• Experience leading a team to implement ServiceNow IRM functionality, including integrations with other systems using the Integration Hub or API functionality.
• Exposure and experience with Governance Risk and Compliance principles and processes, including foundational data models (entity structure), risk frameworks, regulatory/industry frameworks, control frameworks, controls assessments, policies and procedures, cyber security/information technology risk management processes, third party risk management processes, controls management processes, issues and exception management.
• Experience with the assessment, design, architecture, and implementation of risk and compliance programs supported by enabling risk technologies.
• Familiarity with Microsoft Office products (e.g., PowerPoint, Word, Excel, Vision), data analytics, and visualization tools.
• Awareness of recent ServiceNow releases (e.g., Utah, Vancouver, etc.) and functionality enhancements to the IRM solutions.
• Willingness to travel to meet client obligations (whether to EY or client locations).

Skills and attributes for success

• Strong project management skills to effectively lead a project from start to finish, including directly interacting with client teams and leading and motivating our EY team members.
• Proactively engages with EY team members and clients in as part of service delivery or as part of business development activities.
• Foster an innovative and inclusive team-oriented work environment. You’ll play an active role in counselling and mentoring junior consultants within the firm.
• Develop and foster relationships with client personnel at appropriate levels, including leading interactions with clients on a regular basis (e.g., workshops, meetings, interviews, status meetings, presentations).
• Consistently deliver quality client services, execute engagement quality, and risk management processes, monitor progress, manage risk, and make certain that key stakeholders are kept informed about progress and expected outcomes.
• Drive high-quality work products on your team within expected timeframes and budget.
• Advise, challenge, and bring relevant insights to clients regarding:
• EY Risk solutions that leverage GRC platforms like ServiceNow IRM, use cases, and functionality, including experience from working with other clients.
• ServiceNow IRM and other risk technology industry practices and roadmaps – where the technology capabilities are headed and address our clients’ evolving needs and objectives.
• How ServiceNow IRM and other risk technology capabilities fit into a client’s ecosystem (e.g., architecture, integrations).
• Enabling risk and compliance processes utilizing risk technology capabilities (e.g., GRC, analytics, emerging tech).
• Risk technology solution architecture, including how ServiceNow capabilities can support or connect with both upstream and downstream processes (as an example, procurement processes connecting to third party risk processes).
• Delivery models, including adjusting to or enabling a client’s preferred development life cycle (e.g., agile).
• Supporting risk technology capabilities post go-live, whether transitioning to the client or positioning EY to provide ongoing support as part of a co-source or managed services delivery model.

What we look for

• Prior experience as a consultant or client-serving professional.
• Familiarity with Waterfall and Agile project delivery methodologies.
• Familiarity with performing integrations via APIs (e.g., REST, SOAP, etc.) and Integration Tools.
• Familiarity with analytics and reporting tools (e.g., Spotfire, PowerBI, Tableau).
• An understanding of and implementation experience with a variety of GRC tools (e.g., ServiceNow IRM, Archer, OneTrust, AuditBoard).
• CISSP, CISA, CRISC or other relevant certification desired.
• Big Four experience is a plus with IT risk, controls, risk management, compliance, or security experience.