Senior IT Risk Management Consultant

As a GRC Archer Developer at EY, you will be responsible for designing, developing, and supporting RSA Archer solutions. You should have a strong understanding of GRC processes, the Archer data model, and end-to-end configuration of use cases. Experience with other GRC tools like SNOW, IBM OpenPages, and ProcessUnity would be advantageous. Key Responsibilities: - Work as a team lead within IT Risk Management (ITRM) projects - Maintain transparency in communication with the project team, highlighting risks and sharing mitigation plans - Propose solutions to customers based on shared requirements - Prepare reports and schedules for clients and other stakeholders - Develop and maintain productive relationships with client personnel - Monitor project deliverables and mentor the project team - Provide regular status reports to project managers and onsite coordinators - Demonstrate flexibility to travel to customer locations or other EY offices as needed - Possess good documentation and communication skills People Responsibilities: - Conduct performance reviews and provide performance feedback for the team - Foster teamwork, quality culture, and lead by example - Train and mentor project resources and team members - Understand and follow workplace policies and procedures Skills and Attributes for Success: - 5-9 years of experience in IT Security, Information Security, Cyber Security, or Cloud Security - Experience in IT Audits, IT General Controls, IT Attestation, SOX-ITGC, etc. - Ability to identify, analyze, mitigate, monitor, and communicate IT risks - Conduct risk assessments for processes, applications, network infrastructure assets, and vendors - Develop Key Risk Indicators (KRIs) and create dashboards for continuous risk monitoring - Experience in IT controls validation and testing, identifying control deficiencies - Develop IT/Information security policies, standards, and procedures - Familiarity with industry standards such as NIST-CSF, ISO27001, ITIL, COBIT, PCI-DSS, etc. - Experience with cloud platforms like Azure, AWS, GCP would be beneficial - Proficient in security design concepts and driving discussions for IT risk management with customers Good to Have (Preferred Qualifications): - Experience in conducting awareness training and workshops on IT Risk Management - Demonstrated track record with consulting organizations or blue-chip companies - Relevant professional qualifications such as CA, MBA, MCA, B.E/B.Tech, etc. Certifications (Preferred): - CISA, CISSP, CRISC, ISO27001, ITIL, COBIT, etc. - Certifications in Cloud platforms such as Azure, AWS, GCP Soft Skills: - Strong communication and stakeholder management skills - Ability to work independently and in cross-functional teams - Detail-oriented with strong documentation and requirement analysis abilities - Manage multiple tasks and deliver within timelines In addition to the job responsibilities, EY offers a supportive environment for professional development, diverse and inclusive culture, and premium benefits for employees. If you are ready to shape your future with confidence and contribute to building a better working world, apply today to join the EY team. As a GRC Archer Developer at EY, you will be responsible for designing, developing, and supporting RSA Archer solutions. You should have a strong understanding of GRC processes, the Archer data model, and end-to-end configuration of use cases. Experience with other GRC tools like SNOW, IBM OpenPages, and ProcessUnity would be advantageous. Key Responsibilities: - Work as a team lead within IT Risk Management (ITRM) projects - Maintain transparency in communication with the project team, highlighting risks and sharing mitigation plans - Propose solutions to customers based on shared requirements - Prepare reports and schedules for clients and other stakeholders - Develop and maintain productive relationships with client personnel - Monitor project deliverables and mentor the project team - Provide regular status reports to project managers and onsite coordinators - Demonstrate flexibility to travel to customer locations or other EY offices as needed - Possess good documentation and communication skills People Responsibilities: - Conduct performance reviews and provide performance feedback for the team - Foster teamwork, quality culture, and lead by example - Train and mentor project resources and team members - Understand and follow workplace policies and procedures Skills and Attributes for Success: - 5-9 years of experience in IT Security, Information Security, Cyber Security, or Cloud Security - Experience in IT Audits, IT General Controls, IT Attestation, SOX-ITGC, etc. - Ability to identify, analyze, mitigate, monitor, and communicate IT risks - Conduct risk assessments for processes, applications, network infrastructure assets, and vendors - Develop Key Risk Indicators (KRIs) and create dashboards for continuous risk monitoring - Exper