
Director, Digital Risk
- London
- Permanent
- Full-time
- Lead and deliver Digital Risk projects and workstreams within broader Risk and Consulting engagements, ensuring market-leading outcomes that exceed client expectations and support new service offerings.
- Develop solutions related to IT risk strategy, policy, and governance. Serve as a Subject Matter Expert on risk model deployment and assessment. Publish thought leadership on key Digital Risk topics.
- Act as a trusted advisor to clients, guiding them through regulatory requirements, compliance audits, and digital risk mitigation strategies.
- Build and maintain relationships with C-Suite and Technology Executives, focusing on risk mitigation, technology compliance, and industry best practices.
- Drive proposal development and sales growth, expanding risk-focused opportunities to strengthen EY's Digital Risk presence.
- Manage clients and multi-year engagements, scoping and improving digital risk strategies, compliance frameworks, and mitigation efforts.
- Collaborate across IT, compliance, finance, and security teams to deliver integrated risk management solutions.
- Mentor and develop Digital Risk professionals, supporting their growth and leadership.
- Lead responses to industry trends, including regulatory shifts and emerging technologies like AI and cloud.
- Oversee practice metrics and KPIs to ensure profitable growth and high-quality service delivery.
- Where relevant, represent EY at industry conferences and client forums, enhancing our brand and market position in Digital Risk.
- Deep expertise in digital risk frameworks, methodologies, and compliance.
- Skilled in translating IT risk regulations into actionable sales opportunities.
- Strong experience with risk management platforms (e.g., GRC), including implementation and optimization.
- Proven track record in leading global risk assessments and mitigation strategies.
- Sharp analytical skills and data-driven decision-making capabilities.
- Demonstrated ability to solve complex client challenges by designing tailored approaches and methodologies - not limited to routine engagements.
- Effective at managing multiple long-term projects and stakeholders in dynamic environments.
- Excellent communicator with strong presentation skills for executive and stakeholder engagement.
- 12+ years of experience in digital risk, IT governance, cybersecurity, and related domains; exposure to AI is a plus.
- Professional certifications (e.g., CISA, CISSP) preferred but not essential.
- Deep expertise in risk management frameworks and IT methodology development.
- Strong track record in regulatory compliance (e.g., UK Corporate Reform, SOx, GDPR, ISO 27001/22301) and industry standards.
- Regular presence in the office, typically 3+ days a week, to support collaboration and stakeholder engagement.