E

Ernst & Young

Global professional services: audit, tax, consulting

Consulting TPRM Senior

Risk, Regulatory & Legal AdvisoryConfirmed live in the last 24 hours
Full-timeTaguig, Metro Manila, PhilippinesNo salary listedIn-person

About the Job

Requirements

  • Four to eight years of demonstrated experience in Risk Management across the Third-Party engagement lifecycle, including pre-contracting, contracting, and post-contracting, and understanding of associated organizational infrastructure such as internal controls, business processes, and governance structures.
  • Strong understanding of the Third-Party Risk Management framework, Risk Management, and Information Security practices.
  • Understanding of the Contract Risk Review management process.
  • Hands-on exposure to Third-Party Risk Management tools and technology solutions, including GRC enablement solutions such as ProcessUnity, Prevalent, Archer, or ServiceNow.
  • Knowledge of standards such as ISO 27001/2, ISO 22301, ISO 27018, PCI-DSS, and HITRUST.
  • Knowledge of privacy regulations such as GDPR and CCPA.
  • Knowledge of regulations such as FISMA, HIPAA, Reg SCI, and MAS.
  • Knowledge of TCP/IP, OSI layers and protocols, networking and security concepts, Physical and Environmental Security, Asset Security, and Identity and Access Management.
  • Knowledge of Windows and Linux security, database security, IT infrastructure including switches, routers, firewalls, IDS and IPS, and security architecture design and review.
  • Familiarity with OWASP, Secure SDLC standards and frameworks, and antivirus solutions such as Symantec and McAfee.
  • Experience in LAN/WAN architectures and reviews.
  • Knowledge of incident management, disaster recovery, business continuity management, and cryptography.
  • Ability to work in a fast-paced consulting environment.

Responsibilities

  • Lead end-to-end delivery of Third-Party Risk Management engagements.
  • Lead the design and implementation of Third-Party Risk Management operating models, identifying and evaluating complex business and technology risks and providing solutions.
  • Follow policies and procedures that support successful implementation of Third-Party Risk Management operating models.
  • Facilitate process walkthrough discussions to document end-to-end business processes and functional requirements.
  • Assess the application of legal and regulatory requirements to clients' Third-Party Risk Management practices.
  • Lead technology enhancement requirements, including automation, data analytics, and artificial intelligence, to support Third-Party Risk Management processes.
  • Drive automation, data analytics, and artificial-intelligence-enabled enhancements.
  • Demonstrate knowledge of market trends, competitor activities, EY products, and service lines.
  • Manage client relationships and stakeholder expectations.
  • Contribute to identifying opportunities to improve engagement profitability.
  • Assist leadership in driving business development initiatives and account management.
  • Mentor and coach junior team members.
  • Actively track and communicate engagement performance and planning to EY engagement management, ensuring project milestones remain on track and are completed on time.
  • Mentor and train team members on Third-Party Risk Management processes, governance, and frameworks.
  • Work cross-functionally with team members to support and drive a collaborative team environment.
  • Create and design presentations to communicate project and deliverable progress to clients.
  • Perform data analyses to understand clients' businesses and identify risk.
  • Execute advanced services and supervise staff in delivering essential services.
  • Understand clients' business environments and basic risk management approaches.
  • Participate in decision-making with engagement management and seek to understand the broader impact of current decisions.
  • Contribute to improving operational efficiency on projects and internal initiatives.

Desired Qualifications

  • Prior Big Four experience.
  • CISSP, CISA, CISM, CTPRP, CIPP, or ISO 27001 Lead Auditor or Lead Implementer certification.
  • Project management skills.
  • Exposure to tools such as ProcessUnity, ServiceNow, or Archer.

About the Company

Ernst & Young

Global professional services: audit, tax, consulting

EY provides professional services across Assurance, Tax, Consulting, and Strategy & Transactions through member firms coordinated by EY Global. It serves clients in about 150 countries with cross-disciplinary teams delivering audits, tax planning, technology, risk management, and M&A and strategy advisory. Its global, integrated platform and large network differentiate it by offering coordinated services across disciplines. The goal is to help clients meet regulatory requirements, improve governance and performance, and create value.

Company size
1,001-5,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Boston, MA
Founded
1991

Recently Posted Jobs

Explore more opportunities at Ernst & Young

See more jobs