Manager - Risk, Process & Controls

EY•Montreal, QC

About The Position

Our Risk, Process & Controls team provides comprehensive risk services that help Organizations enhance their risk management, internal controls and internal audit functions. As a Manager, you will lead a team in delivering high-quality risk consulting services, focusing on the evaluation, design and enhancement of Risk, Process & Controls capabilities, including Enterprise, Operational, Digital, Data, and Third-Party Risk Management. You will drive innovation in internal controls, manage business process risks, support internal audit transformation, and conduct diagnostics to assess the effectiveness of internal controls. This job posting relates to an existing vacancy within our organization.

Requirements

Strong skills in project management and engagement closure.
Deep understanding of risk and control frameworks across non-financial risk domains, and industry best practices.
Excellent communication and interpersonal skills, with the ability to engage effectively with clients and team members at all levels.
Fluency in French and English is required.
Demonstrate sound judgement and risk-awareness on AI-data use, confidentiality, and ethical considerations.
A minimum of 6-8 years of experience in risk and controls management with at least 2 years in a leadership role.
Bachelor’s Degree (or higher) in Accounting, Business, STEM, or other related fields of study.
Excellent analytical, problem-solving, and project management skills.

Nice To Haves

Professional accounting / audit designation(s) (e.g. CPA, CIA, CISA or CISM) is highly desirable.
Experience in consulting and client service delivery is desirable.

Responsibilities

Manage and deliver projects related to the design and enhancement of Enterprise Risk Management (ERM), Operational Risk Management (ORM), Third-Party Risk Management (TPRM), Digital Risk Management, and Data Risk Management programs.
Manage and deliver projects related to IT security, Governance, Risk and Compliance (GRC) programs and technologies, IT governance, and IT risk and control assessments.
Manage and deliver projects related to assessments of current and target operating models for risk and control management across the three lines of defense (LOD).
Manage and deliver projects related to planning and leading internal audit, Sarbanes-Oxley (SOX), and internal controls projects aligned with client risk management strategies.
Manage and deliver projects related to evaluating and testing business process, management review, and digital risk controls.
Identify control enhancements and process improvement opportunities.
Develop and maintain strong client relationships, understanding their business challenges and providing tailored solutions.
Collaborate with cross-functional teams to integrate digital risk management into broader risk and compliance programs.
Consult with the leadership team and provide subject matter advice on non-financial risk, internal controls and internal audit best practices.
Coach and develop team members while fostering a culture of continuous learning and professional growth.
Contribute, as required, to business development activities, including proposal writing, client presentations, and networking.
Stay abreast of emerging digital risks, technologies, and industry trends to provide forward-thinking advice to clients.