Full-Time

Director - Process and Controls

Risk Consulting

Posted on 3/24/2026

Ernst & Young

Ernst & Young

5,001-10,000 employees

Global professional services: consulting, assurance, tax

No salary listed

London, UK

Hybrid

Travel outside of the assigned office may be required (UK regional/international travel).

Category
Consulting (1)
Required Skills
Risk Management
Requirements
  • Extensive experience in generating and leading risk, process and control services at large and complex organisations.
  • A relevant professional certification (ACA, ACCA, CIA, CISA, or equivalent).
  • Significant expertise in the delivery of risk, process and controls related solutions such as risk management, internal audit, controls transformation, SOX 404 implementation.
  • Significant experience in understanding and enabling regulatory compliance requirements (e.g. UK Corporate Reform, SOX, and other industry-specific regulatory requirements)
Responsibilities
  • Business Development: Established networks/relationships across key sectors. Leverage of networks to identify, pursue, and convert opportunities, such as proposal development, contribution to additional sales, and production of thought leadership.
  • Engagement Delivery: Lead and own the delivery of Risk Consulting engagements (e.g., risk management, internal audit, UK Corporate Reform, SOX 404, controls transformation) ensuring projects are effective, exceeding client expectations and identifying sell-on work.
  • Agility: Ability to self-start and balance sales activity with engagement management.
  • Trusted Advisor Role: Act as a ‘trusted advisor’ to clients, serving as a first point of contact in navigating complex regulations, including UK Corporate Reform, US Sarbanes-Oxley (SOX) compliance, Global Internal Audit Standards and other industry-specific requirements; guiding clients on how these regulations impact their internal controls and reporting obligations.
  • Client relationship management: Excellent interpersonal skills to build and maintain strong relationships with clients, understanding their needs and creating tailored solutions.
  • Process & Controls Leadership: Lead confidently across the breadth of our process and controls related solutions. Be a present, high touch leader of our team dedicated to developing and nurturing our talent, engaging in internal team initiatives and fostering a positive team culture.
  • Solution Development: Develop new solutions and existing offerings pertaining to risk and control strategies, policies and governance.
  • Quality and Risk Management: Detailed understanding and demonstratable track record of compliance with quality and risk management principles.
  • Business Acumen: Demonstrate business acumen through an ability to understand the broader business context, considering financial, operational, compliance and strategic aspects.
  • Learning and Development: Foster a culture of continuous learning and professional development for yourself and the wider team, demonstrating a proactive approach and natural curiosity. Providing and inspiring role model for the team.
  • Collaboration: Work cross-functionally with internal and client teams across risk, IT, compliance, finance, and security to drive integrated risk management solutions.
  • Team Mentorship: Mentor, coach and develop a team of Risk professionals, supporting their professional development and contributing to a positive team environment with continuous growth.
  • Industry Knowledge: Stay informed about industry trends, including regulatory changes, technology growth and other relevant risk best practices.
  • Performance Excellence: Monitor engagement success metrics and KPIS, proactively resolving deviations to deliver high-quality outcomes.
  • Communication: Excellent communication skills and the ability to flex your style, deliver difficult messages whilst maintaining strong relationships.
  • Values: Promote our values around Diversity, Equity, and Inclusiveness.
Desired Qualifications
  • Industry-leading and demonstrable expertise pertaining to risk, processes and controls solutions with agility and aptitude to flex across solutions and sectors.
  • Demonstrated success in leveraging industry networks to identify and convert opportunities, with experience in proposal development and thought leadership.
  • Proven experience in building and maintaining relationships with C-suite executives, with the ability to discuss complex risk solutions confidently.
  • Strong understanding of complex regulations, including UK Corporate Reform and US Sarbanes-Oxley (SOX) compliance, with the ability to guide clients on regulatory impacts.
  • Exceptional communication and presentation skills for executive reporting, stakeholder engagement, and internal leadership.
  • Strong leadership skills and demonstrated ability to inspire, nurture, develop and motivate team members, fostering an environment of collaboration and continuous growth.
  • Strong sense of ethics and integrity, ensuring compliance with legal and regulatory standards while promoting ethical practices within the organisation.
  • A self-starter with a proactive approach and a strong commitment to continuous learning and professional growth.
  • Ability to navigate and adapt to changing regulatory environments and emerging risks.
  • Proven ability to bring external audit and financial accounting experience to engagements, ensuring strong control frameworks aligned with best practices.
  • Expertise in core systems (e.g., SAP and Oracle) to identify control weaknesses and recommend improvements.
  • Experience of driving transformation and deploying digital solutions to solve complex client problems.

EY (Ernst & Young) provides professional services at a global scale, offering consulting, assurance, tax, and transaction advisory services. It serves clients across industries such as technology, media, real estate, hospitality, and construction. Instead of selling a single product, EY works with clients through tailored engagements where cross-disciplinary teams analyze challenges, design strategies, perform audits, help with tax planning, and assist with mergers or divestitures. What sets EY apart is its worldwide reach and integrated service model, industry-specific expertise, and focus on responsible business practices like sustainability, cybersecurity, and workforce flexibility. EY’s goal is to help organizations improve performance, manage risk, and achieve sustainable growth while building a better working world.

Company Size

5,001-10,000

Company Stage

N/A

Total Funding

N/A

Headquarters

Boston, Massachusetts

Founded

1991

Simplify Jobs

Simplify's Take

What believers are saying

  • ESG and sustainability services capture growing enterprise carbon tracking demand.
  • AI-driven consulting from whyaye acquisition expands high-margin advisory revenue.
  • Diverse entrepreneur network expansion opens mid-market consulting growth opportunities.

What critics are saying

  • NMC Health £2bn lawsuit alleges negligent audits from 2012-2018 period.[2]
  • SEC $100 million penalty for CPA exam cheating and evidence withholding.[1]
  • Super Micro Computer auditor resignation cites governance and transparency concerns.[4]

What makes Ernst & Young unique

  • Blockchain carbon tracking platform on Ethereum differentiates ESG advisory services.
  • whyaye acquisition strengthens AI and data analytics consulting capabilities.
  • Tony Jordan appointed Chief Ethics Officer signals governance and compliance focus.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Professional Development Budget

Flexible Work Hours

Remote Work Options

Company News

Yahoo Finance
Apr 7th, 2026
EY deploys agentic AI across global audit practice with 2028 full rollout target

EY has deployed enterprise-scale agentic AI across its global assurance practice, integrating a multi-agent AI framework into EY Canvas, its audit technology platform. The system, built on Microsoft Azure, Microsoft Foundry and Microsoft Fabric, aims to help audit teams coordinate complex tasks and respond to risks more adaptively. The rollout follows extensive piloting and testing, with AI now embedded across all audit stages for engagements worldwide. EY expects the technology to underpin all end-to-end audit activities by 2028. The company says the platform will reduce administrative burdens on clients whilst enhancing risk evaluation and maintaining professional judgement. EY Global chair Janet Truncale described it as a "human-led, AI-powered audit of the future" designed to deliver greater value and insight for clients and stakeholders.

PR Newswire
Mar 26th, 2026
EY launches blockchain privacy sandbox to test zero-knowledge proof smart contracts

EY has launched the EY Blockchain Privacy Sandbox, a web-based development environment enabling organisations to experiment with privacy-preserving smart contracts on public Ethereum Virtual Machine-compatible blockchains. The sandbox uses Starlight, an open-source zero-knowledge proof compiler originally developed by EY and now in the public domain. The platform allows developers to transform standard Solidity smart contracts into privacy-preserving applications without requiring local setup, lowering technical barriers to zero-knowledge technology adoption. It includes sample projects that can be explored and modified to accelerate proof-of-concept development. Grand View Research projects the global zero-knowledge proof market will reach approximately $7.6 billion by 2033. The sandbox is designed for experimentation and validation, helping businesses assess feasibility before broader enterprise integration. The platform is now available via request.

The Associated Press
Mar 24th, 2026
Unilever and UK government back Kenya-India waste tech partnership to automate recycling

Kenyan waste management enterprise TakaTaka Ni Mali and India-based TrashCon have partnered to modernise Kenya's circular economy infrastructure through decentralised waste segregation technology. The collaboration was facilitated by TRANSFORM, an impact accelerator led by Unilever, the UK Government's FCDO, and EY. The partnership addresses implementation challenges of Kenya's Sustainable Waste Management Act (2022), which requires household waste separation. TrashCon's TrashBot technology automatically separates wet organic material from dry recyclables, creating safer conditions for waste workers whilst improving recovery rates. Urban waste collection in Kenya currently reaches only 20-30%. TakaTaka Ni Mali will serve as local reseller for TrashBot, supporting installation and maintenance whilst deploying its Ecomali digital traceability platform. The first TrashBot model will be showcased at Kenya International Investment Conference from 25-27 March, with two additional machines planned.

PR Newswire
Mar 18th, 2026
EY and 8090 launch AI-native software development platform claiming 70% productivity boost and 80x faster delivery

Ernst & Young LLP has launched EY.ai Product Development Lifecycle in partnership with 8090, introducing an AI-native approach to software development. The system, powered by 8090's Software Factory platform, uses AI agents with human oversight to deliver production-ready software in days or weeks rather than months. The framework addresses traditional development challenges including project failures and budget overruns. An EY US use case demonstrates a 70% increase in productivity and cost efficiency, with delivery speeds 80 times faster and over 95% automated test coverage. EY.ai PDLC will be deployed to tens of thousands of EY US consultants. The platform targets two key areas: legacy system modernisation and new product development. EY plans to expand the programme with additional technology partners over time.

Business Wire
Mar 17th, 2026
EY selects CrowdStrike and NVIDIA AI to power agentic SOC services

Ernst & Young LLP has selected CrowdStrike's Falcon platform to power its Agentic Security Operations Centre services, accelerated by NVIDIA AI infrastructure. The collaboration aims to help enterprises transform security operations using AI agents capable of responding to threats at machine speed. The partnership comes as average eCrime breakout time has dropped to 29 minutes, with the fastest observed attack occurring in just 27 seconds. CrowdStrike's agentic platform leverages NVIDIA's AI tools, including Nemotron models and NeMo microservices, to enable more accurate threat analysis and faster response times. The system includes AI-ready data layers, mission-ready agents trained on real response expertise, and Charlotte AI AgentWorks, which allows organisations to build custom agents without coding. The platform aims to address the challenge of analysts manually investigating the growing volume of security alerts.

INACTIVE