Director - Technology Risk

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

Opportunity

We are looking for an experienced Director to join our Global Internal Audit team, as an Audit Leader. This role offers the opportunity to operate at a global executive level while further developing your leadership skills in an inclusive and diverse environment. The scope of Global Internal Audit encompasses both global systems and processes and those across the regions. You will be at the forefront helping EY with managing the risks and challenges of a rapidly changing digital landscape, ensuring compliance with evolving regulations, and identifying opportunities for innovation and continuous improvement to deliver valuable outcomes. If you love Technology and Digital / Cyber Risk and would like to gain a different perspective of our own large and globally diverse EY organization and want to make an impact, come join our team.

You will not be required to relocate, however you will need to be flexible to travel internationally and to accommodate international time zones.

Key Responsibilities

• Support the Chief Audit Executive build a technology risk capability that will enable internal audit to provide confidence and assurance that EY’s strategic technology and core platforms are protected and operating effectively. This includes AI, digital platforms and core business technologies e.g. Mercury / SAP.
• Lead the development of the technology-focused internal audit plan encompassing risk assessments and the strategic internal audit approach to emerging digital, cybersecurity, data, compliance and process risks. This also will include monitoring the technology environment, follow-up activities and future audit or advisory coverage.
• Lead internal audits and advisory engagements across IT risk management, cybersecurity, digital compliance (including ISO, PCI, Privacy and other leading security and technology frameworks and regulations), program risk, resilience, data governance and responsible AI.
• Assess key technology environments, applications, systems, interfaces, IT dependencies and IT general controls to support risk-based audit scoping and execution.
• Oversee end-to-end audit delivery, including scoping, planning, budgeting, resourcing, execution, reporting and completion of required documentation in accordance with GIA methodology.
• Promote innovation, data analytics, automation and leading practices to enhance audit effectiveness and insight generation.
• Cultivate trusted relationships with senior management, Audit Sponsors, stakeholders, second line functions and subject matter resources to support effective audit engagement, alignment on key risks and transparent communication of audit progress and outcomes, while maintaining GIA’s independence, objectivity and professional scepticism.
• Lead the development of high‑quality audit reports and deliverables that clearly communicate key risks, findings and actionable insights, ensuring consistency with GIA reporting standards, required reviews and stakeholder expectations.
• Develop and strengthen GIA’s technology audit capabilities by supporting recruitment, managing and coaching team members and subject matter resources, fostering knowledge sharing, technical upskilling and an inclusive, high‑performing team environment.

Skills and Attributes for Success

The successful candidate will be an experienced Technology Risk Director with strong experience in cybersecurity, new technology (e.g. AI / automation and related tools), technology governance and risk management, risk management and internal audit. The primary capability is to bring broad experience across IT governance, cybersecurity, digital compliance, ERP, resilience, data governance, responsible AI and technology‑enabled transformation. This technology experience needs to be combined with the ability to lead complex global projects and internal audits, building trust and engagement with senior stakeholders and deliver clear, risk‑based insights that support effective governance, risk management and control improvement.

• Foster an inclusive, innovative and high‑performing team environment by actively coaching, mentoring and developing team members.
• Deliver high‑quality audit and advisory work within agreed timelines and budgets, while proactively managing risks, monitoring progress and keeping stakeholders informed of key outcomes and emerging matters.
• Communicate clearly and effectively, providing actionable insights and practical recommendations on control issues, risk implications and opportunities to address identified gaps.
• Stay current on business, technology and industry trends relevant to EY’s evolving risk landscape.

Education

• A bachelor’s degree or equivalent qualification in a related field, with approximately 15+ years of relevant experience in technology risk, internal audit, public accounting, risk management or a large global organization.
• Certifications and / or accreditations in Information Security, Microsoft, SAP, AI or other relevant technologies.

Experience

• At least 10 years of experience in a leadership role managing a team, and demonstrated experience in the following areas:
  • Technology‑enabled Integrated Risk Management (IRM) or Governance, Risk and Compliance (GRC) programs
  • Portfolio, Program and Project risk management consulting and/or assurance services
  • Regulatory Compliance (e.g. Privacy, SoCI Act, SoX, Spam Act)
  • Resiliency – design, build, implementation of business and technology resilience programs
  • AI Governance, Responsible Use of AI (incl. Responsible AI strategy, AI Governance framework)
  • Governance, Risk and Compliance
  • Internal Controls and Internal Audit (incl. Controls optimisation, SoX)
  • Assurance – technology‑focused internal audit (incl. IT General Controls, Cyber Security, and AI Governance)

Certification Requirements

CISSP/CISM/CCSP/CISA certification desired; non‑certified hires will be supported in acquiring relevant certifications.

What We Offer You (Canada)

We offer a competitive compensation package where you’ll be rewarded based on your performance and recognized for the value you bring to our business. In addition, our Total Rewards package allows you to decide which benefits are right for you and which ones help you create a solid foundation for your future. Our Total Rewards package includes a discretionary bonus program, a comprehensive medical, prescription drug and dental coverage plan, a defined contribution pension plan, a great vacation policy plus firm paid days that allow you to enjoy longer long weekends throughout the year, statutory holidays and paid personal days (based on province of residence), and a range of exciting programs and benefits designed to support your physical, financial and social well‑being. Plus, we offer:

• Support and coaching from some of the most engaging colleagues in the industry

• Learning opportunities to develop new skills and progress your career

• The freedom and flexibility to handle your role in a way that’s right for you

What We Offer You (United States)

The compensation ranges below are provided in order to comply with United States pay transparency laws. Other geographies will follow their local salary guidelines, which may not be a direct conversion of published US salary ranges. At EY, we’ll develop you with future‑focused skills and equip you with world‑class experiences. We’ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more.

• The base salary range for this job in all geographic locations in the US is $214,300 to $424,300. The base salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is $257,100 to $482,100. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography.
• Join us in our team‑led and leader‑enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40‑60% of the time over the course of an engagement, project or year.
• Under our flexible vacation policy, you’ll decide how much vacation time you need based on your own personal circumstances. You’ll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well‑being.

Equal Employment Opportunity

EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.

Accessibility and Reasonable Accommodation

EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY’s Talent Shared Services Team (TSS) or email the TSS at ssc.customersupport@ey.com.

Responsible Use of Artificial Intelligence

At EY, we use artificial intelligence (AI) tools as one element of our recruitment process to enhance efficiency and improve the candidate experience. While AI supports us in our process, human judgment and decision‑making remain integral in our candidate experience. We are committed to the responsible use of AI, and our practices are continuously reviewed and refined to ensure they align with the highest ethical principles and regulatory requirements.

Recruitment Agency Policy

To all recruitment agencies: EY does not accept unsolicited resumes from recruitment agencies. Any resumes submitted without a prior agreement or request from our hiring team will not be considered. EY is not responsible for any fees related to unsolicited resumes.

#J-18808-Ljbffr