Risk Consulting expert

The Opportunity

We are expanding our Resilience, Compliance & Cyber team and are looking for Staff with an interest in operational resilience, technology risk, cyber risk, compliance, and governance domains. We welcome candidates with foundational knowledge and academic or practical exposure across one or more of the following areas:

• Operational Resilience and Business Continuity Management (BCM)
• Disaster Recovery (DR) and Technology Resilience
• Regulatory Compliance and Controls Assurance
• Governance, Risk and Compliance (GRC)
• Cyber Risk and Cyber Resilience
• Critical Business Services, Asset, and Dependency Assessments

Staff will support engagement delivery through research, testing preparations, evidence collection, documentation, analysis, and stakeholder coordination while working closely with Seniors and Managers. This role provides an excellent opportunity to build expertise in resilience, compliance, technology risk, and cyber resilience while supporting global client engagements.

Your Key Responsibilities

• Support operational resilience, business continuity, disaster recovery, cyber resilience, and compliance assessments.
• Assist in conducting Business Impact Analyses (BIA), critical business service reviews, and dependency mapping activities.
• Support reviews of resilience and compliance programs against applicable frameworks and regulations, including ISO 22301, ISO 27001, NIST CSF, DORA, CPS 230, and NIS2.
• Participate in control testing, evidence reviews, walkthroughs, and assurance activities.
• Gather, validate, and document evidence to support assessment conclusions and client deliverables.
• Assist in the evaluation of business continuity, disaster recovery, crisis management, incident management, and resilience testing programs.
• Support assessments of critical processes, systems, assets, third-party providers, and operational dependencies.
• Participate in stakeholder interviews, workshops, and process walkthroughs.
• Identify observations, risks, and improvement opportunities under the guidance of senior team members.
• Assist in preparing reports, presentations, management summaries, and engagement documentation.
• Support project coordination activities, status tracking, and quality review procedures.
• You will be responsible for executing tasks with increasing autonomy, applying sound judgment within defined parameters, and contributing to team outcomes. You are expected to demonstrate initiative, resolve routine issues independently, and support junior colleagues.
• You will anticipate and identify risks within engagement and share any issues with senior members of the team.
• In line with EY commitment to quality, you'll confirm that work is of high quality and is reviewed by the next-level reviewer.

Skills and attributes for success

• Foundational understanding of Operational Resilience, Business Continuity Management (BCM), Disaster Recovery (DR), Crisis Management, and Cyber Resilience concepts.
• Basic understanding of risk management, governance, controls, and regulatory compliance principles.
• Awareness of resilience and compliance frameworks such as ISO 22301, ISO 27001, NIST CSF, DORA, CPS 230, and NIS2.
• Understanding of concepts such as Business Impact Analysis (BIA), Recovery Time Objectives (RTO), Recovery Point Objectives (RPO), critical business services, and dependency mapping.
• Strong analytical and problem-solving capabilities.
• Good documentation, communication, and report-writing skills.
• Ability to manage assigned tasks and deliver high-quality work within agreed timelines.
• Strong attention to detail and commitment to quality.
• Ability to work collaboratively within global and cross-functional teams.
• Interest in developing expertise across resilience, compliance, cyber risk, and technology risk domains.
• Demonstrate AI awareness and proficiency by leveraging approved AI tools to enhance productivity, improve decision-making, and drive innovation while ensuring responsible, ethical, and secure use of AI technologies.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.