Risk Consulting – Senior Consultant - Risk Technology, GRC/IRM Platforms

The risk landscape is continuously changing due to market volatility, geopolitical crises, widespread economic changes, regulatory reforms, and cyber threats. Organizations are increasingly seeking to establish, mature, and optimize risk and compliance activities to manage risk more efficiently and effectively, including providing greater visibility to risks – enabling decision-making. As risk and compliance program evolve, organizations are focused on greater value from those functions that drive cost savings, effciency and insights. Clients are no longer seeking isolated technology implementations to enable their programs. They are looking for or end‑to‑end Risk solutions that integrate risk processes, data, and technology to simplify governance, automate compliance, and deliver forward‑looking risk intelligence.

As a member of our Risk Technology practice, you will help our clients assess, design, and implement integrated risk management solutions that leverage leading GRC platforms (e.g., ServiceNow IRM, Archer, AuditBoard), EY risk solutions and intellectual property, data and analytics capabilities, and emerging technologies. You will bring functional, technical, deep domain knowledge and strong architectural thinking to help clients achieve measurable business outcomes. 

The opportunity

The ability to grow both personally and professionally as a result of working for a global, multi-disciplinary consulting firm in which you will have the opportunity to work across sectors, competencies, and with resources of a diverse background to solve our clients’ challenges or realize their business objectives. As a Risk Technology consultant, you have the opportunity to operate at the intersection of risk, technology, data, AI and innovation, while leading a wide array of projects to drive client value creation.

Your key responsibilities

As demand for our Risk Technology capabilities continue to grow, we are seeking highly motivated Senior level consultants, focused on ServiceNow IRM architecture, design, build, and deployment, including supporting end-to-end projects (e.g., requirements, design, build, test, deploy), developing resources/team members, and supporting pursuits/business development, as appropriate. You will work with multi-disciplinary team members, within Risk Technology and across other competencies, to help clients automate and mature their risk and compliance programs utilizing ServiceNow Integrated Risk Management (IRM) as well as other leading GRC solutions and platforms. You will support and work with team members, both onshore and offshore, including developing both functional and technical skillsets required to address our client’s evolving needs. In addition, you will have the opportunity to support business development activities ranging from responding to proposals to fostering relationships and setting the stage for the next phases of work or opportunities. You will be expected to directly interact and work with our clients, including supporting the day-to-day execution and interactions between our EY and client teams. As EY is a global leading professional services organization, you will be working with talented individuals and within a culture built on teaming, integrity, and collaboration, and for however long you stay, the exceptional EY experience lasts a lifetime.

Skills and attributes for success

• Strong project management skills to effectively deliver a project from start to finish, including directly interacting with client teams.
• Proactively engages with EY team members and clients in as part of service delivery or as part of business development activities, where appropriate.
• Foster an innovative and inclusive team-oriented work environment.
• Develop and foster relationships with client personnel at appropriate levels, including supporting interactions with clients on a regular basis (e.g., workshops, meetings, interviews, status meetings, presentations).
• Consistently deliver quality client services, execute engagement quality, and risk management processes, monitor progress, manage risk, and make certain that key stakeholders are kept informed about progress and expected outcomes.
• Drive high-quality work products on your team within expected timeframes and budget.
• Advise, challenge, and bring relevant insights to clients regarding:
  • EY Risk solutions that leverage GRC platforms like ServiceNow IRM, use cases, and functionality, including experience from working with other clients.
  • ServiceNow IRM and other risk technology industry practices and roadmaps – where the technology capabilities are headed and address our clients’ evolving needs and objectives.
  • How ServiceNow IRM and other risk technology capabilities fit into a client’s ecosystem (e.g., architecture, integrations).
  • Enabling risk and compliance processes utilizing risk technology capabilities (e.g., GRC, analytics, emerging tech).
  • Risk technology solution architecture, including how ServiceNow capabilities can support or connect with both upstream and downstream processes (as an example, procurement processes connecting to third party risk processes).
  • Delivery models, including adjusting to or enabling a client’s preferred development life cycle (e.g., agile).
  • Supporting risk technology capabilities post go-live, whether transitioning to the client or positioning EY to provide ongoing support as part of a co-source or managed services delivery model.
• Keep abreast of current business and industry trends related to both risk technology and our client’s business.
• Demonstrate both functional and technical capabilities, professional knowledge, and ability to assimilate new knowledge.
• Prepare and deliver client presentations– comfortable learning and working within Microsoft PowerPoint.
• Delivers client demonstrations of ServiceNow IRM and other leading GRC solutions – can lead a demonstration on a solution enabled by technology (versus just demonstrating technology capabilities).
• Contributes to the development of innovative solutions and thought leadership, and support relevant internal initiatives and networking required to go-to-market and drive growth.

To qualify for the role, you must have

• A bachelor's degree in Computer Science, Information Systems, Business, Finance, Accounting, Engineering, or a related field and 2 years of experience implementing ServiceNow IRM, TPRM, or BCM solutions/use cases.
• Alternatively, must have a Master's degree in Computer Science, Information Systems, Business, Finance, Accounting, Engineering, or a related field and 1 year of work experience implementing ServiceNow IRM, TPRM, or BCM solutions/use cases.
• Certification from ServiceNow as a Certified System Administrator (CSA) and having completed the training and certification for GRC Fundamentals (or other relevant certifications such as GRC Implementation, Third Party Risk Management, Business Continuity Management, Flow Design, UI Builder, Performance Analytics).
• Experience leading a team to implement ServiceNow IRM functionality, including integrations with other systems using the Integration Hub or API functionality.
• Exposure and experience with Governance Risk and Compliance principles and processes, including foundational data models (entity structure), risk frameworks, regulatory/industry frameworks, control frameworks, controls assessments, policies and procedures, cyber security/information technology risk management processes, third party risk management processes, controls management processes, issues and exception management.
• Experience with the assessment, design, architecture, and implementation of risk and compliance programs supported by enabling risk technologies.
• Familiarity with Microsoft Office products (e.g., PowerPoint, Word, Excel, Vision), data analytics, and visualization tools.
• Awareness of recent ServiceNow releases (e.g., Utah, Vancouver, etc.) and functionality enhancements to the IRM solutions.
• Willingness to travel to meet client obligations (whether to EY or client locations).

Ideally, you’ll also have

• Prior experience as a consultant or client-serving professional
• Familiarity with Waterfall and Agile project delivery methodologies
• Familiarity with performing integrations via APIs (e.g., REST, SOAP, etc.) and Integration Tools.
• Familiarity with analytics and reporting tools (e.g., Spotfire, PowerBI, Tableau)
• An understanding of and implementation experience with a variety of GRC tools (e.g., ServiceNow IRM, Archer, OneTrust, AuditBoard)
• CISSP, CISA, CRISC or other relevant certification desired
• Big Four experience is a plus with IT risk, controls, risk management, compliance, or security experience

What we look for

We are looking for passionate, inclusive, and collaborative leaders who seek an opportunity to grow as a Risk Technology consultant working to support our clients across a range of sectors, including developing trusting relationships with our people and clients. If you have a genuine passion for working in a team to solve often complex problems leveraging technology and data as well as developing your career personally and professionally, this is the role for you.