EY
Risk Consulting - Cyber Risk - Senior Consultant - Multiple Cities
EY, Chicago, Illinois, United States, 60290
Overview
Join to apply for the
Risk Consulting - Cyber Risk - Senior Consultant - Multiple Cities
role at
EY . EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities. At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.
The objective of our consulting risk services is to provide clients with a candid and reliable overview of their risk landscape. For our Cyber Risk services, the ideal candidate will be responsible for identifying, evaluating, and managing cyber risks across the organization, working closely with IT, security teams, and business units to ensure that our cyber risk posture is aligned with our business objectives and regulatory requirements.
Your Key Responsibilities
Operate as a fieldwork leader to assist clients in employing proper information systems, resources, and controls to maximize efficiencies and minimize risk. Work with client personnel to analyze, evaluate, and enhance information systems facilitating the business internal control process, and assist clients and other Risk Assurance professionals in performing information technology control and security engagements.
Skills And Attributes For Success
Collaborate with other members of the engagement team to plan the engagement and develop work program timelines, risk assessments, and other planning documents. Document the business processes dependent on information technology. Serve as a fieldwork leader by directing the daily progress of fieldwork, informing supervisors of engagement status, and managing staff performance. Demonstrate and apply a thorough understanding of complex information systems. Use knowledge of the current IT environment and industry IT trends to identify issues, and communicate this information to the engagement team and client management through written and verbal communications. Demonstrate strong project management skills and teamwork to enhance deliverables. Conduct comprehensive cyber risk assessments to identify vulnerabilities, threats, and potential impacts to the organization. Develop and implement risk mitigation strategies and controls to protect against cyber threats. Collaborate with IT and security teams to ensure cybersecurity policies and procedures are up-to-date and effectively implemented. Monitor the cyber threat landscape and provide timely intelligence to relevant stakeholders. Facilitate risk management discussions with business leaders to ensure understanding of cyber risk exposure. Oversee the cyber risk management lifecycle, including risk identification, analysis, response, and monitoring. Coordinate with external partners, such as insurance providers and cybersecurity firms, to manage and transfer cyber risks where appropriate. Prepare and present risk reports and dashboards to senior management and the board of directors. Ensure compliance with relevant laws, regulations, and industry standards related to cybersecurity and data protection. Conduct training and awareness programs to promote a culture of cybersecurity across the organization.
Qualifications
A bachelor’s or master’s degree (information technology, cybersecurity, risk management, or related field). Professional certifications such as CISSP, CISM, CRISC, or similar are highly desirable. Minimum of 2 years of experience in cybersecurity, risk management, or a related role. Strong understanding of cybersecurity frameworks (e.g., NIST, ISO 27001) and regulatory requirements. Proven experience in risk assessment methodologies and tools. Excellent analytical and problem-solving skills. Strong communication and interpersonal skills, with the ability to convey complex information to non-technical stakeholders. Ability to work independently and as part of a team in a fast-paced environment. Willingness to travel outside of the assigned office location at least 50% of the time; valid passport required.
Ideally, You’ll Also Have
A bachelor’s or master’s degree in business, accounting, finance, computer science, information systems, engineering, or related field. CPA, CA, CISA, CISSP, CISM, CBCP, CIA, CIPP, CGEIT certification is desired; non-certified hires are required to become certified to be eligible for promotion to Manager. Additional cloud-based certifications (e.g., CCSP, CCSK, CCAK, Microsoft Azure Fundamentals, AWS Certified Cloud Practitioner, Google Cloud Digital Leader).
What We Look For
We’re looking for passionate leaders with strong vision and a desire to stay on top of trends in the risk industry. If you have a genuine passion for helping businesses achieve their full potential, this role is for you.
What We Offer
We offer a comprehensive compensation and benefits package. Salary ranges vary by geography, with a Total Rewards package including medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options. We support flexible vacation and designate EY paid holidays, breaks, and leaves to support well-being. Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next. Success as defined by you: We’ll provide tools and flexibility for meaningful impact. Transformative leadership: Coaching and confidence to lead effectively. Diversity and inclusion: You’ll be embraced for who you are and empowered to use your voice.
EY accepts applications on an ongoing basis. EY exists to build a better working world and to provide equal employment opportunities to applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, in accordance with applicable law. EY is committed to providing reasonable accommodation to qualified individuals with disabilities, including veterans. If you need assistance applying online or an accommodation during the application process, please contact EY’s Talent Shared Services.
For those living in California, please click here for additional information.
Seniority level: Mid-Senior level Employment type: Full-time Job function: Consulting, Information Technology, and Sales Industries: Professional Services
#J-18808-Ljbffr
Join to apply for the
Risk Consulting - Cyber Risk - Senior Consultant - Multiple Cities
role at
EY . EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities. At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.
The objective of our consulting risk services is to provide clients with a candid and reliable overview of their risk landscape. For our Cyber Risk services, the ideal candidate will be responsible for identifying, evaluating, and managing cyber risks across the organization, working closely with IT, security teams, and business units to ensure that our cyber risk posture is aligned with our business objectives and regulatory requirements.
Your Key Responsibilities
Operate as a fieldwork leader to assist clients in employing proper information systems, resources, and controls to maximize efficiencies and minimize risk. Work with client personnel to analyze, evaluate, and enhance information systems facilitating the business internal control process, and assist clients and other Risk Assurance professionals in performing information technology control and security engagements.
Skills And Attributes For Success
Collaborate with other members of the engagement team to plan the engagement and develop work program timelines, risk assessments, and other planning documents. Document the business processes dependent on information technology. Serve as a fieldwork leader by directing the daily progress of fieldwork, informing supervisors of engagement status, and managing staff performance. Demonstrate and apply a thorough understanding of complex information systems. Use knowledge of the current IT environment and industry IT trends to identify issues, and communicate this information to the engagement team and client management through written and verbal communications. Demonstrate strong project management skills and teamwork to enhance deliverables. Conduct comprehensive cyber risk assessments to identify vulnerabilities, threats, and potential impacts to the organization. Develop and implement risk mitigation strategies and controls to protect against cyber threats. Collaborate with IT and security teams to ensure cybersecurity policies and procedures are up-to-date and effectively implemented. Monitor the cyber threat landscape and provide timely intelligence to relevant stakeholders. Facilitate risk management discussions with business leaders to ensure understanding of cyber risk exposure. Oversee the cyber risk management lifecycle, including risk identification, analysis, response, and monitoring. Coordinate with external partners, such as insurance providers and cybersecurity firms, to manage and transfer cyber risks where appropriate. Prepare and present risk reports and dashboards to senior management and the board of directors. Ensure compliance with relevant laws, regulations, and industry standards related to cybersecurity and data protection. Conduct training and awareness programs to promote a culture of cybersecurity across the organization.
Qualifications
A bachelor’s or master’s degree (information technology, cybersecurity, risk management, or related field). Professional certifications such as CISSP, CISM, CRISC, or similar are highly desirable. Minimum of 2 years of experience in cybersecurity, risk management, or a related role. Strong understanding of cybersecurity frameworks (e.g., NIST, ISO 27001) and regulatory requirements. Proven experience in risk assessment methodologies and tools. Excellent analytical and problem-solving skills. Strong communication and interpersonal skills, with the ability to convey complex information to non-technical stakeholders. Ability to work independently and as part of a team in a fast-paced environment. Willingness to travel outside of the assigned office location at least 50% of the time; valid passport required.
Ideally, You’ll Also Have
A bachelor’s or master’s degree in business, accounting, finance, computer science, information systems, engineering, or related field. CPA, CA, CISA, CISSP, CISM, CBCP, CIA, CIPP, CGEIT certification is desired; non-certified hires are required to become certified to be eligible for promotion to Manager. Additional cloud-based certifications (e.g., CCSP, CCSK, CCAK, Microsoft Azure Fundamentals, AWS Certified Cloud Practitioner, Google Cloud Digital Leader).
What We Look For
We’re looking for passionate leaders with strong vision and a desire to stay on top of trends in the risk industry. If you have a genuine passion for helping businesses achieve their full potential, this role is for you.
What We Offer
We offer a comprehensive compensation and benefits package. Salary ranges vary by geography, with a Total Rewards package including medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options. We support flexible vacation and designate EY paid holidays, breaks, and leaves to support well-being. Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next. Success as defined by you: We’ll provide tools and flexibility for meaningful impact. Transformative leadership: Coaching and confidence to lead effectively. Diversity and inclusion: You’ll be embraced for who you are and empowered to use your voice.
EY accepts applications on an ongoing basis. EY exists to build a better working world and to provide equal employment opportunities to applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, in accordance with applicable law. EY is committed to providing reasonable accommodation to qualified individuals with disabilities, including veterans. If you need assistance applying online or an accommodation during the application process, please contact EY’s Talent Shared Services.
For those living in California, please click here for additional information.
Seniority level: Mid-Senior level Employment type: Full-time Job function: Consulting, Information Technology, and Sales Industries: Professional Services
#J-18808-Ljbffr