FS-RISK CONSULTING- FS ITRM-Senior

As a Senior in the Risk Consulting - EGRC- IT Risk Management team at EY, your role will involve working on client engagements to identify, assess, and mitigate security risks that could impact client organizations. You will be responsible for developing risk management strategies that align with the client's goals and regulatory requirements. Your responsibilities would include: - Ability to work as a team lead within IT Risk Management (ITRM) projects. - Thorough knowledge of Information Security, Data Protection, and Cyber Resilience fundamentals. - Demonstrating the right attitude towards teaming, ownership, and knowledge sharing. - Working closely with the project team to maintain transparent communication, highlight risks, and share mitigation plans. - Visualizing and proposing solutions to customers based on the requirements shared. - Helping prepare reports and schedules for clients and other relevant parties. - Developing and maintaining productive relationships with client personnel. - Planning and monitoring project deliverables for the team. - Mentoring the project team in executing project deliverables. - Providing regular status reports to the project manager and onsite coordinators. - Demonstrating flexibility to travel to customer locations or other EY offices when required. - Possessing good documentation and communication skills. In terms of mandatory skills requirements, you should have: - 5 years of experience in IT Security, Information Security, Cyber Security, or Cloud Security. - Comprehensive understanding of IT Processes Risk and Controls, including experience in IT Audits, IT General Controls, IT Attestation, SOX-ITGC, etc. - Experience working with IT Risk Management frameworks to identify, analyze, mitigate, monitor, and communicate IT risks. - Conducting risk assessments for IT processes, applications, network infrastructure assets. - Drafting IT/Cyber risk assessment reports with findings, associated risks, and recommendations. - Developing Key Risk Indicators (KRIs) and creating dashboards for continuous risk monitoring. - Experience in conducting IT controls validation and testing, and identifying control deficiencies. - Developing IT/Information security policies, standards, and procedures. - Working with industry standards such as NIST-CSF, ISO27001, ITIL, COBIT, PCI-DSS, CSA-CCM, CIS/FFIEC Cloud Security Guidelines, and Regulatory guidelines. - Experience with various cloud platforms such as Azure, AWS, GCP would be a plus. Preferred skills include: - Experience in conducting awareness training and workshops on IT Risk Management. - Demonstrated track record with a consulting organization or a blue-chip organization. - Delivery of engagements and client management experience. - Relevant professional qualifications such as CA, MBA, MCA, MSB. - Certifications such as CISA, CISSP, CRISC, ISO27001, and certifications in Cloud platforms like Azure, AWS, GC. Join EY in Hyderabad and be a part of building a better working world by creating new value for clients, people, society, and the planet. EY teams help clients shape the future with confidence and address pressing issues with data, AI, and advanced technology. Operating across assurance, consulting, tax, strategy, and transactions services, EY provides services in over 150 countries and territories. As a Senior in the Risk Consulting - EGRC- IT Risk Management team at EY, your role will involve working on client engagements to identify, assess, and mitigate security risks that could impact client organizations. You will be responsible for developing risk management strategies that align with the client's goals and regulatory requirements. Your responsibilities would include: - Ability to work as a team lead within IT Risk Management (ITRM) projects. - Thorough knowledge of Information Security, Data Protection, and Cyber Resilience fundamentals. - Demonstrating the right attitude towards teaming, ownership, and knowledge sharing. - Working closely with the project team to maintain transparent communication, highlight risks, and share mitigation plans. - Visualizing and proposing solutions to customers based on the requirements shared. - Helping prepare reports and schedules for clients and other relevant parties. - Developing and maintaining productive relationships with client personnel. - Planning and monitoring project deliverables for the team. - Mentoring the project team in executing project deliverables. - Providing regular status reports to the project manager and onsite coordinators. - Demonstrating flexibility to travel to customer locations or other EY offices when required. - Possessing good documentation and communication skills. In terms of mandatory skills requirements, you should have: - 5 years of experience in IT Security, Information Security, Cyber Security, or Cloud Security. - Comprehensive understanding of IT Processes Risk and Controls, including experience in IT Audits, IT General Controls,