Risk Consulting – Senior Consultant - Risk Technology, Third Party Risk Management

The risk landscape is continuously changing due to market volatility, geopolitical events, regulatory reform, cyber threats, and the rapid adoption of AI. At the same time, organizations rely more than ever on an expanding ecosystem of third parties to operate and grow. That reliance brings real value, but also exposure: disruptions, data and cyber incidents, regulatory scrutiny, and concentration risk that often sit outside an organization’s direct control.

Clients are looking to move beyond point-in-time, questionnaire-driven third-party programs toward approaches that are connected, more continuous, and able to support better decisions across the third-party lifecycle – from sourcing and onboarding through ongoing monitoring and offboarding. Achieving that requires both a strong understanding of how third-party risk should be managed and the ability to enable it through technology, including platforms like ServiceNow.

As a member of our Risk Consulting practice, you will help clients assess, design, and transform their third-party risk management programs and the technology that powers them. You will bring a rare combination of TPRM domain knowledge and risk technology experience, allowing you to contribute across program design, process and operating model work, and platform implementation, and to help clients connect third-party risk with related disciplines such as procurement, cyber, operational resilience, enterprise risk, and compliance.

The opportunity

This is an opportunity to grow both personally and professionally at a global, multi-disciplinary consulting firm. You will build and apply expertise in both third-party risk management and the technologies that enable it, helping clients use risk platforms, AI, and data across the third-party management lifecycle. You won’t only work within risk competencies. You’ll bring the breadth of the firm, working alongside procurement, legal, contracting, and many other teams to help clients set up end-to-end processes with third-party risk built in throughout the lifecycle. You will also have the opportunity to help clients shift to managed services models based on their needs and continue to optimize those capabilities. That breadth will speed up your development and position you as a trusted advisor who can connect what a program needs to achieve with how to make it happen.

Your key responsibilities

As our Risk Consulting capabilities continue to evolve and grow, we are seeking highly motivated Senior consultants who can support clients from design through implementation of their third-party risk programs. You will work with multi-disciplinary teams across the firm, both onshore and offshore, to help clients assess, design, and transform their programs end to end. That includes orchestrating third-party risk processes, putting technology to work, and moving from traditional point-in-time models to data-driven, real-time risk sensing.

• Assess current-state third-party risk programs against leading practices and regulatory expectations, and identify gaps and priorities
• Bring domain depth and sector-relevant solutions to tailor third-party risk programs to each client’s third-party ecosystem, regulatory environment, and business
• Design and enhance frameworks, operating models, and processes across the third-party lifecycle, from sourcing and onboarding through ongoing monitoring and offboarding
• Orchestrate third-party risk across connected functions such as procurement, contracting, cyber, resilience, and compliance
• Translate program design into technology solutions, supporting delivery on platforms like ServiceNow from requirements through design, build, test, and deployment
• Help clients use data, AI, and external risk intelligence to move toward continuous monitoring and real-time risk sensing
• Use AI in your own work to deliver faster, sharper insights, and help clients make the most of AI in their programs
• Interact directly with clients and support day-to-day execution between EY and client teams
• Develop team members and support business development, from proposals to building relationships that lead to future work

Skills and attributes for success:

• Strong project management skills to deliver work from start to finish, including working directly with client teams
• Build trusted relationships with client stakeholders through workshops, interviews, status meetings, and presentations
• Consistently deliver high-quality work on time and within budget, keeping stakeholders informed of progress and outcomes
• Foster an innovative, inclusive, team-oriented work environment
• Advise, challenge, and bring relevant insights to clients on:
  • Third-party risk leading practices, regulatory expectations, and sector-specific considerations
  • Designing third-party risk processes end to end and connecting them with procurement, contracting, cyber, resilience, and compliance
  • How risk platforms like ServiceNow, and other technologies, enable and automate third-party risk processes and fit into a client’s broader ecosystem
  • Using data, AI, and external risk intelligence to shift from point-in-time assessments to continuous, real-time risk sensing
  • Where the market and technology are heading, and what that means for the client’s program and roadmap
  • Delivery and support models, including agile delivery, transition to operations, and ongoing optimization
• Use AI in your day-to-day work to improve the speed, quality, and insight of what you deliver
• Lead client demonstrations of solutions that show business outcomes, not just technology features
• Create clear, compelling client presentations and deliverables
• Stay current on third-party risk, risk technology, and industry trends affecting our clients
• Contribute to thought leadership, solution development, and go-to-market activities that drive growth

To qualify for the role, you must have:

• A bachelor’s degree in Information Systems, Computer Science, Business, Finance, Accounting, Engineering, or a related field and 2+ years of relevant experience. Alternatively, a master’s degree in a related field and 1+ year of relevant experience.
• Experience in third-party risk management and in enabling risk programs through technology
• Understanding of the third-party management lifecycle, including sourcing, contracting, onboarding, ongoing performance and risk management, and offboarding
• Experience with third-party risk processes, including inherent risk and segmentation, due diligence, risk assessments, ongoing monitoring, and issue management
• Familiarity with regulatory and industry expectations for third-party risk in one or more sectors, such as financial services, healthcare, or technology
• Experience assessing, designing, or implementing risk and compliance programs enabled by technology
• Hands-on experience with risk platforms such as ServiceNow, Archer, or similar, including designing and deploying solutions in client environments
• Understanding of risk platform fundamentals, including risk and control frameworks, data models, assessments, issues, and reporting
• Experience using data and analytics to improve how work gets done
• AI fluency, including using tools like Microsoft Copilot in day-to-day work
• Relevant experience and certifications in third-party risk management and enabling platforms
• Proficiency with Microsoft Office, especially PowerPoint and Excel
• Willingness to travel to meet client obligations

Ideally, you’ll also have:

• Prior consulting or client-serving experience
• Experience enabling third-party risk management programs through technology, from defining requirements and designing processes through deploying and adopting solutions on platforms like ServiceNow
• Experience connecting third-party risk solutions with related processes and systems, such as procurement, contracting, and cyber
• Experience with third-party risk intelligence and monitoring providers, such as risk ratings and data services
• Familiarity with agile and waterfall delivery
• Big Four experience in third-party risk, IT risk, controls, or compliance

What we look for

We are looking for curious, collaborative, and versatile risk professionals who understand how third-party risk should be managed and how technology, data, and AI make it work. You are comfortable moving between designing programs and helping implement them, and you see the bigger picture of how third-party risk connects across the business. If you enjoy solving complex problems, building trusted relationships with clients and colleagues, and growing your career in a firm that invests in your development, this is the role for you.

What we offer you
At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers.

• The salary range for this job is:
  • New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $122,900 to $204,900
  • Bay Area California offices – $128,100 to $213,400
  • All other offices locations in the US, including Sacramento – $102,500 to $187,900
• Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography.  In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.

Are you ready to shape your future with confidence? Apply today.                                          

• To make the most of your application experience, please limit yourself to two applications within a six-month period.
• EY accepts applications for this position on an on-going basis.
• For those living in California, please click herefor additional information.
• At EY, our values set the foundation for how we work and the behaviors we expect of our people.  Any misrepresentation or falsification of information or lack of integrity at any point in the recruiting process may result in withdrawal of your candidacy, revocation of an offer or immediate termination of employment.

EY  |  Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

All in to shape the future with confidence.

EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.  

EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process,  please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY’s Talent Shared Services Team (TSS) or email the TSS at [email protected].