Manager - Non-Financial Risk and Controls

EY•Montreal, QC

About The Position

Our Non-Financial Risk (NFR) and Controls team provides comprehensive risk services that help Financial Services Organizations enhance their risk management, internal controls and internal audit functions. As a Manager, you will lead a team in delivering high-quality risk consulting services, focusing on the evaluation, design and enhancement of NFR capabilities, including Enterprise, Operational, Digital, Data, and Third-Party Risk Management. You will drive innovation in internal controls, manage business process risks, support internal audit transformation, and conduct diagnostics to assess the effectiveness of internal controls.

Requirements

Strong skills in project management and engagement closure.
Deep understanding of risk and control frameworks across NFR domains, regulations, and industry best practices.
Excellent communication and interpersonal skills, with the ability to engage effectively with clients and team members at all levels.
Bilingualism in both French and English is therefore a requirement of this role.
A minimum of 6-8 years of experience in risk and controls management with at least 2 years in a leadership role.
Bachelor’s Degree (or higher) in Accounting, Business, STEM, or other related fields of study.
Excellent analytical, problem-solving, and project management skills.

Nice To Haves

Professional accounting / audit designation(s) (e.g. CPA, CIA, CISA or CISM) is highly desirable.
Experience in consulting and client service delivery is desirable.
Highly motivated talented individuals with a strong willingness to think outside of the box.
Motivation to take initiative and seek out opportunities to improve our current relationships and expand our business in the evolving market.

Responsibilities

Manage and deliver projects related to: The design and enhancement of Enterprise Risk Management (ERM), Operational Risk Management (ORM), Third-Party Risk Management (TPRM), Digital Risk Management, and Data Risk Management programs
Manage and deliver projects related to: IT security, Governance, Risk and Compliance (GRC) programs and technologies, IT governance, and IT risk and control assessments
Manage and deliver projects related to: Assessments of current and target operating models for risk and control management across the three lines of defense (LOD)
Manage and deliver projects related to: Planning and leading internal audit, Sarbanes-Oxley (SOX), and internal controls projects aligned with client risk management strategies
Manage and deliver projects related to: Evaluating and testing business process, management review, and digital risk controls
Manage and deliver projects related to: Identifying control enhancements and process improvement opportunities
Develop and maintain strong client relationships, understanding their business challenges and providing tailored solutions.
Collaborate with cross-functional teams to integrate digital risk management into broader risk and compliance programs.
Consult with the leadership team and provide subject matter advice on NFR, internal controls and internal audit best practices.
Coach and develop team members while fostering a culture of continuous learning and professional growth.
Contribute, as required, to business development activities, including proposal writing, client presentations, and networking.
Stay abreast of emerging digital risks, technologies, and industry trends to provide forward-thinking advice to clients.