Technology Risk Management - Associate Director

Ethics, Compliance, and Risk Management (ECRM) supports our people in managing the risks that arise during our daily working lives. We work closely with all parts of the organization to identify, manage, and monitor risk, providing coordinated advice and assistance on independence, conflicts, compliance, regulatory, policy, security issues, as well as dealing with claims and any queries regarding ethics.

The opportunity 

We live in an increasingly connected world, which presents new challenges in managing risk. With fast-paced technology advancements, new innovations within emerging technologies, and an ever-challenging regulatory environment, it is business critical for our organization to identify not only the risks but the opportunities these present to us. As an Associate Director with our Technology Risk Management (TRM) function, you will make educated, thoughtful decisions. Our brand depends on it. It’s all part of our long-term commitment to building a better working world and in return, you can expect plenty of opportunities to take on new responsibilities and develop your career. 

Your key responsibilities 

As part of EY Americas TRM function, you will assist in the development, implementation, and monitoring of various technology risk management program initiatives. We are looking for a high performing Associate Director to lead the execution of strategic and operational program initiatives. This position requires in-depth subject matter knowledge of technology, emerging technology, compliance, and risk management. The TRM function is focused on delivering technology risk insights and mitigating actions to the business to enable better risk-based decisions and align with client expectations.

Skills and attributes for success 

• Leads activities within the Technology Risk Management function of ECRM, including but not limited to:
• Leading risk consultations regarding the implementation of new technologies, acting as a central figure in managing potential threats. This includes but is not limited to engaging the appropriate stakeholders based on the risk profile and identifying risk mitigation controls and activities
• Executing technology risk assessments to identify technology risks across our Americas technology environment
• Supporting risk mitigation and monitoring activities involving aspects such as third-party management, technology governance, awareness, and policy formulation, data security, business continuity planning, identity and access administration, application risk valuations, and ensuring compliance with essential norms

• Assists with strategy formation, direction, and portfolio management of technology risk management activities
• Assists in analyzing related legal and regulatory developments to confirm applicable requirements

• Assists in maintaining and updating related EY policies, guidance, training, and communication plans to reflect new and/or changes to Artificial Intelligence laws, regulations, and standards
• Collaborates with various functions across the organization, such as EY's Global Enterprise Technology, Client Technology, Global Information Security, and members of the business and Service Line Quality, to design and implement policies and processes to manage and mitigate technology risk
• Creates reports on various program activities to be delivered to key program stakeholders, including senior leaders within the organization
• Continuously maintains and expands knowledge of field of expertise and communicates new developments and resulting impact to program stakeholders and team members
• Participates in various ad-hoc program projects, as needs develop
• Manages junior level team members within the TRM function

To qualify for the role, you must have 

• Excellent verbal and written communications skills as well as listening and interpretation skills; ability to interface and communicate effectively with all levels of EY personnel

• Excellent organizational skills; demonstrated ability to create, plan and successfully handle multiple tasks simultaneously; and ability to meet multiple deadlines in a fast-paced environment

• Solid understanding of and commitment to stay up to date with emerging technologies, such as AI and Blockchain
• Solid understanding of relevant firm business and area-wide technology issues and concerns
• Strong project management and problem-solving skills
• Demonstrate pro-activity and thought leadership around process
• Flexibility and the ability to take the initiative
• Good working knowledge of information systems and common software packages

• Strong research skills and ability to think strategically and handle complex concepts
• Able to lead virtual teams, demonstrating natural authority

• Adept at delegating, motivating and mentoring team members
• Bachelor’s degree or equivalent work experience; Graduate degree preferred
• 8-10 plus years related experience
• Relevant Professional Certifications, such as: CISSP, CISM, CISA, CDPSE, Security+, Network+, PMP, or additional cloud/emerging technology related certifications preferred

Ideal candidate will have

• Understanding of the firm’s existing uses of technology and technology policies
• Knowledge of Artificial Intelligence and associated risks
• Knowledge and experience to review complex situations and assist in proposing solutions
• Strong knowledge of relevant global, national, and local AI laws, regulations, and standards, as well as familiarity with other risk management initiatives outside of this specific area
• Sound understanding of high-level technology trends
• Experience in technology risk management and information security

What we look for 

We are looking for individuals who will be able to right-size risk and recommend creative solutions to complex problems, as well as make significant contributions to multi-faceted Ethics, Risk Management, and Compliance projects.