Inactive
E

Ernst & Young

Global professional services: audit, tax, consulting

Manager Risk New Technologies

Security Governance, Risk & CompliancePosted on Aug 6
Full-timeParis, France

About the Job

Requirements

  • At least 6 years of experience in consulting or IT, security, or regulatory-compliance transformation.
  • Risk management experience, including EBIOS RM or ISO 27005, control definition, and key risk and performance indicators.
  • Governance, Risk & Compliance experience, including policies, responsibility assignment matrices, identity and access management and segregation of duties, internal IT audits, and internal controls.
  • Architecture and security knowledge, including Zero Trust, cloud and network security, and operational technology and Internet of Things security.
  • Data governance, data protection impact assessments, data ethics, and awareness experience.
  • Responsible AI experience, including governance, use-case assessment, compliance, and traceability.
  • Quantum readiness knowledge, including cryptography, post-quantum cryptography, and crypto-agility.
  • Experience de-risking program delivery for ERP, carve-outs, and post-merger work, including security and compliance quality.
  • Experience working with clients with significant risk exposure, such as those in industry, energy, finance, retail, or healthcare.
  • Fluent spoken and written English.
  • A high-level higher-education qualification.
  • Analytical and synthesis skills to examine complex information and explain it clearly and concisely.
  • Communication skills to present ideas and recommendations appropriately to different audiences and build collaborative relationships.
  • Strong writing skills to produce clear, structured, error-free documents within deadlines.
  • Intellectual curiosity and adaptability to respond to new situations and changes in the field.

Responsibilities

  • Frame and secure proofs of concept involving S/4HANA, Internet of Things, edge computing, and cloud; define go/no-go decisions using threat modeling.
  • Assess quantum risks and lead a post-quantum cryptography transition, including cryptographic inventory and migration.
  • Deploy responsible AI policies, committees, traceability, and use-case assessments.
  • Strengthen operational technology security through zones and conduits, detection, playbooks, and production continuity.
  • Align governance and compliance with GDPR, NIS2, and the EU AI Act, and prepare SOX and CSRD audits.
  • Design identity and access management covering identities, privileges, federation, and segregation of duties, as well as governance, risk and compliance and IT asset management for resilience.
  • Develop the service offering and co-create proposals.
  • Manage consultants and deliver client work with a high degree of autonomy.
  • Facilitate team activities and support the team's skills development.

Desired Qualifications

  • Certifications such as EBIOS RM, ISO/IEC 27001 Lead Auditor or Lead Implementer, CISSP, CISM, CRISC, CCSK, CCSP, ISA/IEC 62443, ITIL, or IAPP CIPP/E, or equivalent.

About the Company

Ernst & Young

Global professional services: audit, tax, consulting

EY provides professional services across Assurance, Tax, Consulting, and Strategy & Transactions through member firms coordinated by EY Global. It serves clients in about 150 countries with cross-disciplinary teams delivering audits, tax planning, technology, risk management, and M&A and strategy advisory. Its global, integrated platform and large network differentiate it by offering coordinated services across disciplines. The goal is to help clients meet regulatory requirements, improve governance and performance, and create value.

Company size
1,001-5,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Boston, MA
Founded
1991

Recently Posted Jobs

Explore more opportunities at Ernst & Young

See more jobs