Full-Time
Quality – Senior Manger
Ernst & Young
10,001+ employees
Provides consulting, assurance, and tax services
No salary listed
Bengaluru, Karnataka, India
In Person
Bachelor's, Master's, JD
 Risk & Compliance (1) |
|---|
Get referred to Ernst & Young
See people who can refer or advise you
- Bachelor's degree required.
- Master's degree, Law degree, or Risk/Compliance qualification preferred.
- 10–15 years of relevant experience in: Contract management; Risk management; Data privacy; Regulatory compliance; Information security governance; Consulting or professional services environments.
- Preferred Certifications: CIPP/E, CIPM, CIPT; CRISC; CISA; ISO 27001 Lead Auditor; CISSP; Certified Contract Manager (CCM); AI Governance / Responsible AI certifications.
- Critical Skills: Contract interpretation; Commercial risk assessment; Regulatory analysis; Negotiation support; Enterprise risk management; Compliance assessments; Audit management; Risk reporting; GDPR; Privacy-by-design; Cross-border data transfers; Cybersecurity controls; Data classification and handling; EU AI Act awareness; Responsible AI principles; AI risk assessments; Third-party AI vendor evaluation; Executive communication; Stakeholder influence; Decision-making under ambiguity; Ability to translate legal and regulatory requirements into practical delivery controls.
- Data Privacy & Security: GDPR; Privacy-by-design; Cross-border data transfers; Cybersecurity controls; Data classification and handling.
- AI Governance: EU AI Act awareness; Responsible AI principles; AI risk assessments; Third-party AI vendor evaluation.
- Business & Leadership: Executive communication; Stakeholder influence; Decision-making under ambiguity; Ability to translate legal and regulatory requirements into practical delivery controls.
- Review Statements of Work (SOWs), MSAs, Change Requests, Service Agreements, and subcontractor agreements.
- Identify contractual obligations that may impact delivery, security, privacy, staffing, geography, subcontracting, hosting, AI usage, or operational processes.
- Translate contractual requirements into actionable delivery controls and compliance obligations.
- Maintain a repository of contract risk clauses, deviations, exceptions, and mitigation actions.
- Provide risk sign-offs and recommendations for complex or high-risk engagements.
- Assess contracts for privacy and data protection obligations.
- Evaluate applicability of GDPR, UK GDPR, EU AI Act, Digital Operational Resilience Act (DORA), Local country privacy regulations, Sector-specific regulations (Financial Services, Healthcare, Public Sector, etc.).
- Ensure compliance requirements are incorporated into delivery plans.
- Support privacy impact assessments and data processing reviews.
- Review cross-border data transfer requirements and restrictions.
- Assess contractual requirements related to AI, GenAI, Machine Learning, Automation, and Data Usage.
- Identify AI-related obligations including Transparency requirements, Model governance requirements, Human oversight requirements, Data governance obligations, AI security controls, AI auditability requirements.
- Partner with AI governance teams to assess compliance with emerging AI regulations and client mandates.
- Review third-party AI tool usage and associated contractual restrictions.
- Evaluate engagement compliance with Information Security policies, Client security requirements, Data handling obligations, Encryption standards, Access management requirements, Incident reporting obligations.
- Validate alignment with privacy, security, and confidentiality commitments.
- Participate in security reviews, spot audits, and compliance assessments.
- Review contractual clauses governing Offshore Delivery Centers (ODCs).
- Support ODC setup governance and compliance validation.
- Ensure contractual commitments are reflected in ODC operational controls.
- Participate in ODC readiness reviews and audits.
- Drive audit remediation and closure of identified findings.
- Assess delivery risks arising from Resource location restrictions, Client-specific delivery controls, Segregation requirements, Staffing commitments, Subcontractor usage, Service-level obligations, Transition and transformation commitments.
- Work with Delivery Excellence teams to ensure contractual obligations are reflected in project governance.
- Identify risks early and recommend preventive actions.
- Establish risk control frameworks for high-risk engagements.
- Monitor compliance throughout the engagement lifecycle.
- Perform periodic reviews of Contractual compliance, Data privacy compliance, Security compliance, AI compliance, ODC compliance.
- Support internal and external audits.
- Track remediation plans and risk closure.
- Partner with Legal, Quality & Risk Management, Data Privacy Officers, Information Security Teams, Delivery Excellence Teams, Client Service Teams, Engagement Leaders.
- Serve as trusted advisor for contract risk interpretation and mitigation.
- Present risk assessments and recommendations to leadership forums.
- CIPP/E, CIPM, CIPT; CRISC; CISA; ISO 27001 Lead Auditor; CISSP; Certified Contract Manager (CCM); AI Governance / Responsible AI certifications
EY (Ernst & Young) is a global professional services firm that provides consulting, assurance, tax, and transaction advisory services across industries such as energy, healthcare, financial services, and real estate. Its work centers on helping clients solve critical business challenges by offering high-value advisory support in areas like supply chain, cybersecurity, sustainability, and digital transformation; revenue comes from fees for consulting, audit, and advisory services. What sets EY apart is its breadth of services across multiple disciplines, deep industry knowledge, and emphasis on thought leadership and research to inform clients’ strategic decisions. The firm aims to help organizations improve operational efficiency, navigate regulatory environments, and stay ahead of market trends by delivering practical, evidence-based guidance and execution support.
Company Size
10,001+
Company Stage
N/A
Total Funding
N/A
Headquarters
London, United Kingdom
Founded
1991
Get referred to Ernst & Young
See people who can refer or advise you
Simplify's Take
What believers are saying
- April 7, 2026, agentic AI rollout targets all end-to-end audit activities by 2028.
- February 10, 2026, Snowflake Innovation Center widens data-cloud transformation sales.
- EY.ai Agentic for Sales launched March 2, 2026, with Snowflake and Canva.
What critics are saying
- July 28, 2026, FRC sanctioned EY £1.197 million for Made.com audit failures.
- July 2026 class action targets EY over tax-team breach exposing Social Security numbers.
- Repeated sanctions break trust and drive clients from EY audits.
What makes Ernst & Young unique
- EY Canvas and agentic AI power 160,000 audits globally.
- Microsoft committed $1 billion with EY on May 21, 2026.
- EY bundles tax, assurance, consulting, and EY-Parthenon inside one platform.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Professional Development Budget
Flexible Work Hours
Remote Work Options
Company News
Ernst & Young's US division is allocating $100 million this fiscal year to bonus payments rewarding employees who demonstrate adaptability, innovation, and judgement. Individual spot awards reach $500, whilst employees or teams making significant contributions can receive between $10,000 and $25,000, five times the previous programme's ceiling. The initiative also covers AI experimentation. "What we recognise signals what we value," said Ginnie Carlier, chief talent and culture officer for EY Americas. The bonuses form part of a broader strategy to reshape employee development across all career levels. Other professional services firms are pursuing similar approaches. KPMG restructured its audit internship this summer to emphasise critical thinking, whilst PwC US introduced training combining AI proficiency with human qualities like empathy. EY reported AI-related revenue grew 30% year-over-year in 2025.
EY-Parthenon has acquired SparkOptimus, a Dutch digital strategy consultancy founded in 2010. The Amsterdam-based firm employs around 50 consultants and specialises in AI transformation, digital business model redesign and technology-driven transformation. SparkOptimus founders Alexandra Jankovich and Tom Voskes, both former McKinsey consultants, said joining EY-Parthenon will create significant value for clients and staff whilst providing access to broader capabilities. The acquisition marks EY-Parthenon's first European deal since 2021. EY-Parthenon, established in 2014, is EY's strategy consulting and transactions advisory business with around 25,000 professionals globally. Mark Reich, Partner at EY-Parthenon Netherlands, said SparkOptimus' expertise will complement existing capabilities in the Dutch market. The deal closes on 1 September 2026. Financial terms were not disclosed.
The UK Government has awarded a contract worth up to £456 million to KPMG and EY to train civil servants, the Financial Times reported, citing government procurement tracker Tussell. Under the arrangement, the firms will train officials across various skills areas, including AI, between 2026 and 2028. KPMG's share is capped at £319 million, representing almost a quarter of its total UK advisory net sales from last year. EY's portion is worth £137 million, equivalent to around 13% of its UK consulting revenue. The deal is the largest single contract awarded to Big Four companies since Tussell started tracking records in 2012. The previous record was a £322 million deal between the Foreign Office and PricewaterhouseCoopers in 2012.
EY has introduced an "invisible" AI router to manage internal AI spending, helping cut token consumption by up to 60% since its April rollout. The router sits behind specialised AI tools and directs employee queries to the most appropriate model for each task, rather than defaulting to the most powerful option. Token costs have become a growing concern as AI providers increasingly charge based on usage. EY's AI Pulse survey found that 82% of senior leaders at companies investing in AI were worried about token usage. The router has been deployed on department-specific platforms, including tax and risk functions, though not on the general Microsoft Copilot chatbot available to all staff. EY has also implemented token budgets based on employees' roles and departments. The firm's global consulting AI leader Dan Diasio said companies should focus AI investment on areas with the deepest impact rather than spreading resources thinly.
The UK's Financial Reporting Council has fined EY nearly £1.2m and audit partner Julie Carlyle £49,000 for failings in their 2021 audit of Made.com. Both received severe reprimands for breaching international auditing standards regarding going concern and deferred tax assets. The FRC said the auditors relied on management forecasts without sufficient challenge or adequate testing. Made.com, an online furniture retailer that listed on the London Stock Exchange in June 2021, entered administration in November 2022 after reporting a £35.3m loss. EY later disclaimed its opinion on Made.com's 2022 interim statements due to material uncertainty about the company's ability to continue operating.