Full-Time
Risk Manager New Technologies
Ernst & Young
5,001-10,000 employees
Global professional services: consulting, assurance, tax
No salary listed
Île-de-France, France
In Person
Bachelor's
 Consulting (1) |
|---|
Get referred to Ernst & Young
See people who can refer or advise you
- At least 6 years of significant experience in consulting or IT transformation, security, or regulatory compliance.
- Experience with risk management, including EBIOS Risk Manager, ISO 27005, control definition, and key risk and performance indicators.
- Experience with Governance, Risk and Compliance, including policies, responsibility assignment matrices, identity and access management/segregation of duties, internal IT audits, and internal control.
- Knowledge of architecture and security, including Zero Trust, cloud and network security, and operational technology/Internet of Things security.
- Knowledge of data governance, data protection impact assessments, data ethics, and awareness programs.
- Experience with responsible artificial intelligence governance, use-case assessment, compliance, and traceability.
- Knowledge of cryptography, post-quantum cryptography, and crypto-agility.
- Experience de-risking program delivery for enterprise resource planning, carve-outs, post-merger activities, and security/compliance quality.
- Experience serving clients with high risk exposure, including industry, energy, finance, retail, or healthcare organizations.
- A high-level higher-education qualification is required.
- Fluent English, both spoken and written, is required.
- Frame and secure proofs of concept involving S/4HANA, Internet of Things, edge computing, and cloud, and define go/no-go decisions using threat modeling.
- Assess quantum risks and lead a post-quantum cryptography roadmap, including cryptographic inventory and migration.
- Deploy responsible artificial intelligence through policies, committees, traceability, and use-case assessments.
- Strengthen operational technology security through zones and conduits, detection, playbooks, and production-continuity measures.
- Align governance and compliance with the General Data Protection Regulation, NIS2, and the European Union Artificial Intelligence Act, and prepare audits involving Sarbanes-Oxley and the Corporate Sustainability Reporting Directive.
- Design identity and access management covering identities, privileges, federation, and segregation of duties, as well as Governance, Risk and Compliance and IT asset management supporting resilience.
- Develop service offerings and co-construct proposals.
- Manage consultants and deliver engagements with a high degree of autonomy.
- Facilitate team activities and support team capability development.
- Certifications such as EBIOS Risk Manager, ISO/IEC 27001 Lead Auditor or Lead Implementer, CISSP, CISM, CRISC, CCSK, CCSP, ISA/IEC 62443, ITIL, IAPP CIPP/E, or equivalent certifications.
- Analytical and synthesis skills for examining complex information and explaining it clearly and concisely.
- Strong communication skills for presenting ideas and recommendations to different audiences and building collaborative relationships.
- Strong written communication for producing clear, structured, accurate documents within deadlines.
- Intellectual curiosity and adaptability to respond to new situations and rapid changes in the field.
EY (Ernst & Young) provides professional services at a global scale, offering consulting, assurance, tax, and transaction advisory services. It serves clients across industries such as technology, media, real estate, hospitality, and construction. Instead of selling a single product, EY works with clients through tailored engagements where cross-disciplinary teams analyze challenges, design strategies, perform audits, help with tax planning, and assist with mergers or divestitures. What sets EY apart is its worldwide reach and integrated service model, industry-specific expertise, and focus on responsible business practices like sustainability, cybersecurity, and workforce flexibility. EY’s goal is to help organizations improve performance, manage risk, and achieve sustainable growth while building a better working world.
Company Size
5,001-10,000
Company Stage
N/A
Total Funding
N/A
Headquarters
Boston, Massachusetts
Founded
1991
Get referred to Ernst & Young
See people who can refer or advise you
Simplify's Take
What believers are saying
- EY.ai Agentic for Sales launched March 2, 2026, broadening AI-led revenue opportunities.
- EY's Copilot rollout reached 150,000 users, boosting productivity 15 percent for client delivery.
- EY's Snowflake Innovation Center, launched February 10, 2026, deepens cloud-data transformation partnerships.
What critics are saying
- EY paid £105.5 million to settle NMC Health claims on May 18, 2026.
- EY faces Shell audit probes; four partners left after December 2025 rotation breaches.
- EY cut 3,000 U.S. jobs in 2025, signaling overcapacity and partner-client pressure.
What makes Ernst & Young unique
- EY Canvas now embeds agentic AI across 160,000 audits in 150 countries.
- EY and Microsoft invested over $1 billion on May 21, 2026, for enterprise AI.
- EY bought Supply Nexus on May 12, 2026, strengthening supply-chain automation and AI consulting.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Professional Development Budget
Flexible Work Hours
Remote Work Options
Company News
EY has introduced an "invisible" AI router to manage internal AI spending, helping cut token consumption by up to 60% since its April rollout. The router sits behind specialised AI tools and directs employee queries to the most appropriate model for each task, rather than defaulting to the most powerful option. Token costs have become a growing concern as AI providers increasingly charge based on usage. EY's AI Pulse survey found that 82% of senior leaders at companies investing in AI were worried about token usage. The router has been deployed on department-specific platforms, including tax and risk functions, though not on the general Microsoft Copilot chatbot available to all staff. EY has also implemented token budgets based on employees' roles and departments. The firm's global consulting AI leader Dan Diasio said companies should focus AI investment on areas with the deepest impact rather than spreading resources thinly.
The UK's Financial Reporting Council has fined EY nearly £1.2m and audit partner Julie Carlyle £49,000 for failings in their 2021 audit of Made.com. Both received severe reprimands for breaching international auditing standards regarding going concern and deferred tax assets. The FRC said the auditors relied on management forecasts without sufficient challenge or adequate testing. Made.com, an online furniture retailer that listed on the London Stock Exchange in June 2021, entered administration in November 2022 after reporting a £35.3m loss. EY later disclaimed its opinion on Made.com's 2022 interim statements due to material uncertainty about the company's ability to continue operating.
Australia's securities regulator is reviewing internal and whistleblower complaints about audit conduct at all Big Four accounting firms. The Australian Securities and Investments Commission will examine allegations of misuse or sharing of confidential information at PwC, Deloitte, EY and KPMG. The review follows multiple scandals, including PwC Australia's 2023 tax leaks case, where a former partner disclosed confidential government information about multinational tax avoidance laws. KPMG Australia recently revealed that more than two dozen employees, including one partner fined A$10,000, used AI to cheat on internal training exams. Meanwhile, Deloitte's latest workforce survey in New Zealand indicates younger professionals are becoming more selective about careers in public accounting.
Trinidad and Tobago has signed agreements with two US companies to develop data centres in the Caribbean nation. The memorandums of understanding with Florida-based Hummingbird AI Holdings and New York's Ernst and Young were signed on Friday, marking the first such deals with a Caribbean country. Ernst and Young will develop a 300-megawatt data centre, whilst Hummingbird AI Holdings plans a 150MW AI infrastructure facility. The government said the initiatives could generate over 5,000 jobs. However, the deals have sparked environmental concerns. Social activist Dr Wayne Kublalsingh criticised the energy consumption plans, whilst water-intensive data centres could strain Trinidad and Tobago's already stretched water supply system.
EY has sacked two staff members who allegedly accessed Australian Prime Minister Anthony Albanese's bank account details whilst working on a contract for Commonwealth Bank. The bank has not commented on how the contractors accessed such sensitive information. The incident means all Big Four consultancies now face scrutiny in Australia. KPMG's chair recently departed after inappropriate use of client data, whilst Deloitte repaid fees for submitting an AI-generated report. PWC faced the most serious scandal, using knowledge gained from tax policy consultations to advise tech companies on reducing tax payments. EY, formerly Ernst and Young, has not disclosed further details about the alleged breach or the circumstances surrounding the access to the Prime Minister's banking information.