E

Ernst & Young

Global professional services: consulting, assurance, tax

Expressions of Interest – Senior Consultant - Digital Risk, Risk Consulting

Risk, Regulatory & Legal AdvisoryUpdated on Nov 14
Full-timeAuckland, New ZealandNo salary listed

About the Job

Requirements

  • Experience in cybersecurity, digital risk, AI risk management, technology risk, IT audit, or technology assurance within consulting, professional services, or a complex enterprise environment.
  • Strong understanding of digital, cyber, and AI risk concepts, including governance, risk and compliance, technology controls, data governance, and emerging technology risks.
  • Experience assessing controls, analysing risks, and developing practical, actionable recommendations.
  • Exposure to recognised frameworks and standards such as ISO 27001, NIST, SOC reporting, NZISM, or AI governance frameworks.
  • Strong analytical, problem-solving, report writing, and stakeholder management skills, with the ability to communicate complex concepts clearly to diverse audiences.

Responsibilities

  • Support delivery of digital, cyber, and AI risk assessments, including maturity reviews, control assessments, risk workshops, and control effectiveness evaluations.
  • Analyse client processes, systems, controls, and governance frameworks to identify risks, improvement opportunities, and practical solutions.
  • Support clients in navigating regulatory and compliance requirements, including ISO 27001, SOC reporting, NIST, NZISM, and emerging AI governance expectations.
  • Prepare high-quality reports, presentations, and client-ready recommendations.
  • Build strong client relationships and communicate digital, cyber, and AI risk concepts to technical and non-technical audiences.
  • Coach and support junior team members through collaboration, knowledge sharing, and work review.
  • Contribute to proposals, internal initiatives, and thought leadership activities.

Desired Qualifications

  • Relevant qualifications or certifications such as CISA, CISM, CRISC, CISSP, ISO 27001, ISO/IEC 42001, or similar technology, cyber, data, or AI risk credentials.
  • A curious and growth-oriented mindset, with a passion for learning and staying ahead of emerging technology, cyber, and AI trends.
  • Strong critical thinking and problem-solving skills, with the ability to navigate ambiguity and develop practical solutions.
  • Excellent written and verbal communication skills, with the ability to tailor messages to technical and non-technical audiences.
  • A collaborative approach and the ability to build trusted relationships with clients and colleagues at all levels.

About the Company

Ernst & Young

Global professional services: consulting, assurance, tax

EY (Ernst & Young) provides professional services at a global scale, offering consulting, assurance, tax, and transaction advisory services. It serves clients across industries such as technology, media, real estate, hospitality, and construction. Instead of selling a single product, EY works with clients through tailored engagements where cross-disciplinary teams analyze challenges, design strategies, perform audits, help with tax planning, and assist with mergers or divestitures. What sets EY apart is its worldwide reach and integrated service model, industry-specific expertise, and focus on responsible business practices like sustainability, cybersecurity, and workforce flexibility. EY’s goal is to help organizations improve performance, manage risk, and achieve sustainable growth while building a better working world.

Company size
5,001-10,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Boston, MA
Founded
1991

Recently Posted Jobs

Explore more opportunities at Ernst & Young

See more jobs