Technology Risk Management - Associate Director

EY•Hartford, DC

2d•$150,000 - $337,500•Hybrid

About The Position

At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. Ethics, Compliance, and Risk Management (ECRM) supports our people in managing the risks that arise during our daily working lives. We work closely with all parts of the organization to identify, manage, and monitor risk, providing coordinated advice and assistance on independence, conflicts, compliance, regulatory, policy, security issues, as well as dealing with claims and any queries regarding ethics. The opportunity We live in an increasingly connected world, which presents new challenges in managing risk. With fast-paced technology advancements, new innovations within emerging technologies, and an ever-challenging regulatory environment, it is business critical for our organization to identify not only the risks but the opportunities these present to us. As an Associate Director with our Technology Risk Management (TRM) function, you will make educated, thoughtful decisions. Our brand depends on it. It’s all part of our long-term commitment to building a better working world and in return, you can expect plenty of opportunities to take on new responsibilities and develop your career.

Requirements

Excellent verbal and written communications skills as well as listening and interpretation skills; ability to interface and communicate effectively with all levels of EY personnel.
Excellent organizational skills; demonstrated ability to create, plan and successfully handle multiple tasks simultaneously; and ability to meet multiple deadlines in a fast-paced environment.
Solid understanding of and commitment to stay up to date with emerging technologies, such as AI and Blockchain.
Solid understanding of relevant firm business and area-wide technology issues and concerns.
Strong project management and problem-solving skills.
Demonstrate pro-activity and thought leadership around process.
Flexibility and the ability to take the initiative.
Good working knowledge of information systems and common software packages.
Strong research skills and ability to think strategically and handle complex concepts.
Able to lead virtual teams, demonstrating natural authority.
Adept at delegating, motivating and mentoring team members.
Bachelor’s degree or equivalent work experience; Graduate degree preferred.
8-10 plus years related experience.
Relevant Professional Certifications, such as: CISSP, CISM, CISA, CDPSE, Security+, Network+, PMP, or additional cloud/emerging technology related certifications preferred.

Nice To Haves

Understanding of the firm’s existing uses of technology and technology policies.
Knowledge of Artificial Intelligence and associated risks.
Knowledge and experience to review complex situations and assist in proposing solutions.
Strong knowledge of relevant global, national, and local AI laws, regulations, and standards, as well as familiarity with other risk management initiatives outside of this specific area.
Sound understanding of high-level technology trends.
Experience in technology risk management and information security.

Responsibilities

Assist in the development, implementation, and monitoring of various technology risk management program initiatives.
Lead the execution of strategic and operational program initiatives.
Deliver technology risk insights and mitigating actions to the business to enable better risk-based decisions and align with client expectations.
Lead risk consultations regarding the implementation of new technologies, acting as a central figure in managing potential threats.
Engage appropriate stakeholders based on the risk profile and identify risk mitigation controls and activities.
Execute technology risk assessments to identify technology risks across our Americas technology environment.
Support risk mitigation and monitoring activities involving aspects such as third-party management, technology governance, awareness, and policy formulation, data security, business continuity planning, identity and access administration, application risk valuations, and ensuring compliance with essential norms.
Assist with strategy formation, direction, and portfolio management of technology risk management activities.
Assist in analyzing related legal and regulatory developments to confirm applicable requirements.
Assist in maintaining and updating related EY policies, guidance, training, and communication plans to reflect new and/or changes to Artificial Intelligence laws, regulations, and standards.
Collaborate with various functions across the organization, such as EY's Global Enterprise Technology, Client Technology, Global Information Security, and members of the business and Service Line Quality, to design and implement policies and processes to manage and mitigate technology risk.
Create reports on various program activities to be delivered to key program stakeholders, including senior leaders within the organization.
Continuously maintain and expand knowledge of field of expertise and communicate new developments and resulting impact to program stakeholders and team members.
Participate in various ad-hoc program projects, as needs develop.
Manage junior level team members within the TRM function.