Senior Quality Manager
Ernst Young · Bengaluru · onsite · Posted 44d ago
Undisclosed10–15 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
Role Summary
The Contract Risk Lead is responsible for assessing, governing, and monitoring contractual, regulatory, privacy, security, operational, AI, and delivery risks associated with GDS-supported engagements. The role ensures that contract obligations, regulatory requirements, client-specific commitments, and internal risk policies are understood, operationalized, and continuously monitored throughout the engagement lifecycle.
The individual will partner with Legal, Quality & Risk Management, Data Privacy, Information Security, Delivery Excellence, ODC, AI Governance, and Engagement teams to proactively identify risks, provide mitigation guidance, and support predictable, compliant delivery.
Key Responsibilities Contract Risk Assessment & Governance - Review Statements of Work (SOWs), MSAs, Change Requests, Service Agreements, and subcontractor agreements.
- Identify contractual obligations that may impact delivery, security, privacy, staffing, geography, subcontracting, hosting, AI usage, or operational processes.
- Translate contractual requirements into actionable delivery controls and compliance obligations.
- Maintain a repository of contract risk clauses, deviations, exceptions, and mitigation actions.
- Provide risk sign-offs and recommendations for complex or high-risk engagements.
- Assess contracts for privacy and data protection obligations.
- Evaluate applicability of:
- GDPR
- UK GDPR
- EU AI Act
- Digital Operational Resilience Act (DORA)
- Local country privacy regulations
- Sector-specific regulations (Financial Services, Healthcare, Public Sector, etc.)
- Ensure compliance requirements are incorporated into delivery plans.
- Support privacy impact assessments and data processing reviews.
- Review cross-border data transfer requirements and restrictions.
- Assess contractual requirements related to AI, GenAI, Machine Learning, Automation, and Data Usage.
- Identify AI-related obligations including:
- Transparency requirements
- Model governance requirements
- Human oversight requirements
- Data governance obligations
- AI security controls
- AI auditability requirements
- Partner with AI governance teams to assess compliance with emerging AI regulations and client mandates.
- Review third-party AI tool usage and associated contractual restrictions.
- Evaluate engagement compliance with:
- Information Security policies
- Client security requirements
- Data handling obligations
- Encryption standards
- Access management requirements
- Incident reporting obligations
- Validate alignment with privacy, security, and confidentiality commitments.
- Participate in security reviews, spot audits, and compliance assessments
- Review contractual clauses governing Offshore Delivery Centers (ODCs).
- Support ODC setup governance and compliance validation.
- Ensure contractual commitments are reflected in ODC operational controls.
- Participate in ODC readiness reviews and audits.
- Drive audit remediation and closure of identified findings.
- Assess delivery risks arising from:
- Resource location restrictions
- Client-specific delivery controls
- Segregation requirements
- Staffing commitments
- Subcontractor usage
- Service-level obligations
- Transition and transformation commitments
- Work with Delivery Excellence teams to ensure contractual obligations are reflected in project governance.
- Identify risks early and recommend preventive actions.
- Establish risk control frameworks for high-risk engagements.
- Monitor compliance throughout the engagement lifecycle.
- Perform periodic reviews of:
- Contractual compliance
- Data privacy compliance
- Security compliance
- AI compliance
- ODC compliance
- Support internal and external audits.
- Track remediation plans and risk closure.
Sourced from naukri
Skills
AutomationAccess ManagementCisacontractual complianceclassificationauditscisspcriscCippai governanceai securityCompliance MonitoringCapital MarketsCyber SecurityAudit Managementcompliancecontract managementArtificial Intelligence
About Ernst & Young
Ernst Young
Management Consulting
44k+
employees
2002
24 years old
Gurgaon / Gurugram, Haryana
India
₹15.3L PA avg
Avg at Ernst & Young
About
At EY, our purpose is Building a better working world. The insights and quality services we provide help build trust and confidence in the capital markets and in economies the world over.
Industries
Management Consulting
Employee ratings
10 reviews
3.4/ 5
Culture
1.9
Career growth
2.3
Work-life
2.5
Employees rate it well for
Job Security36Skill Development35
Find them on