Risk Consulting - Risk Technology - GRC/IRM Platforms - Senior Consultant

EY•Charlotte, NC

2d•$97,900 - $203,900•Hybrid

About The Position

The risk landscape is continuously changing due to market volatility, geopolitical crises, widespread economic changes, regulatory reforms, and cyber threats. Organizations are increasingly seeking to establish, mature, and optimize risk and compliance activities to manage risk more efficiently and effectively, including providing greater visibility to risks – enabling decision-making. As risk and compliance program evolve, organizations are focused on greater value from those functions that drive cost savings, effciency and insights. Clients are no longer seeking isolated technology implementations to enable their programs. They are looking for or end‑to‑end Risk solutions that integrate risk processes, data, and technology to simplify governance, automate compliance, and deliver forward‑looking risk intelligence. As a member of our Risk Technology practice, you will help our clients assess, design, and implement integrated risk management solutions that leverage leading GRC platforms (e.g., ServiceNow IRM, Archer, AuditBoard), EY risk solutions and intellectual property, data and analytics capabilities, and emerging technologies. You will bring functional, technical, deep domain knowledge and strong architectural thinking to help clients achieve measurable business outcomes.

Requirements

Strong project management skills to effectively deliver a project from start to finish, including directly interacting with client teams
Proactively engages with EY team members and clients in as part of service delivery or as part of business development activities, where appropriate
Foster an innovative and inclusive team-oriented work environment
Develop and foster relationships with client personnel at appropriate levels, including supporting interactions with clients on a regular basis (e.g., workshops, meetings, interviews, status meetings, presentations)
Consistently deliver quality client services, execute engagement quality, and risk management processes, monitor progress, manage risk, and make certain that key stakeholders are kept informed about progress and expected outcomes
Drive high-quality work products on your team within expected timeframes and budget
A bachelor's degree in Computer Science, Information Systems, Business, Finance, Accounting, Engineering, or a related field and 2 years of experience implementing ServiceNow IRM, TPRM, or BCM solutions/use cases
Alternatively, must have a Master's degree in Computer Science, Information Systems, Business, Finance, Accounting, Engineering, or a related field and 1 year of work experience implementing ServiceNow IRM, TPRM, or BCM solutions/use cases
Certification from ServiceNow as a Certified System Administrator (CSA) and having completed the training and certification for GRC Fundamentals (or other relevant certifications such as GRC Implementation, Third Party Risk Management, Business Continuity Management, Flow Design, UI Builder, Performance Analytics)
Experience leading a team to implement ServiceNow IRM functionality, including integrations with other systems using the Integration Hub or API functionality
Exposure and experience with Governance Risk and Compliance principles and processes, including foundational data models (entity structure), risk frameworks, regulatory/industry frameworks, control frameworks, controls assessments, policies and procedures, cyber security/information technology risk management processes, third party risk management processes, controls management processes, issues and exception management
Experience with the assessment, design, architecture, and implementation of risk and compliance programs supported by enabling risk technologies
Familiarity with Microsoft Office products (e.g., PowerPoint, Word, Excel, Vision), data analytics, and visualization tools
Awareness of recent ServiceNow releases (e.g., Utah, Vancouver, etc.) and functionality enhancements to the IRM solutions
Willingness to travel to meet client obligations (whether to EY or client locations)

Nice To Haves

Prior experience as a consultant or client-serving professional
Familiarity with Waterfall and Agile project delivery methodologies
Familiarity with performing integrations via APIs (e.g., REST, SOAP, etc.) and Integration Tools
Familiarity with analytics and reporting tools (e.g., Spotfire, PowerBI, Tableau)
An understanding of and implementation experience with a variety of GRC tools (e.g., ServiceNow IRM, Archer, OneTrust, AuditBoard)
CISSP, CISA, CRISC or other relevant certification desired
Big Four experience is a plus with IT risk, controls, risk management, compliance, or security experience

Responsibilities

Support end-to-end projects (e.g., requirements, design, build, test, deploy)
Develop resources/team members
Support pursuits/business development, as appropriate
Work with multi-disciplinary team members, within Risk Technology and across other competencies, to help clients automate and mature their risk and compliance programs utilizing ServiceNow Integrated Risk Management (IRM) as well as other leading GRC solutions and platforms
Support and work with team members, both onshore and offshore, including developing both functional and technical skillsets required to address our client’s evolving needs
Support business development activities ranging from responding to proposals to fostering relationships and setting the stage for the next phases of work or opportunities
Directly interact and work with our clients, including supporting the day-to-day execution and interactions between our EY and client teams
Advise, challenge, and bring relevant insights to clients regarding: EY Risk solutions that leverage GRC platforms like ServiceNow IRM, use cases, and functionality, including experience from working with other clients
Advise, challenge, and bring relevant insights to clients regarding: ServiceNow IRM and other risk technology industry practices and roadmaps – where the technology capabilities are headed and address our clients’ evolving needs and objectives
Advise, challenge, and bring relevant insights to clients regarding: How ServiceNow IRM and other risk technology capabilities fit into a client’s ecosystem (e.g., architecture, integrations)
Advise, challenge, and bring relevant insights to clients regarding: Enabling risk and compliance processes utilizing risk technology capabilities (e.g., GRC, analytics, emerging tech)
Advise, challenge, and bring relevant insights to clients regarding: Risk technology solution architecture, including how ServiceNow capabilities can support or connect with both upstream and downstream processes (as an example, procurement processes connecting to third party risk processes)
Advise, challenge, and bring relevant insights to clients regarding: Delivery models, including adjusting to or enabling a client’s preferred development life cycle (e.g., agile)
Advise, challenge, and bring relevant insights to clients regarding: Supporting risk technology capabilities post go-live, whether transitioning to the client or positioning EY to provide ongoing support as part of a co-source or managed services delivery model
Keep abreast of current business and industry trends related to both risk technology and our client’s business
Prepare and deliver client presentations
Deliver client demonstrations of ServiceNow IRM and other leading GRC solutions
Contribute to the development of innovative solutions and thought leadership, and support relevant internal initiatives and networking required to go-to-market and drive growth