Overview In this role, you will help design and assess risk and compliance within cloud-native, AI-enabled technology ecosystems. You'll collaborate with cross-functional teams, engage client stakeholders, and contribute to scalable, audit-ready controls across DevOps and SDLC/PDLC processes. The position sits in EY's Digital Risk practice, supporting technology-driven clients in the TMT sector. You will shape risk representations for modern platforms and AI-enabled engineering environments, delivering high-quality outputs that enable safer, compliant digital transformations. This role offers the chance to work across Northeast clients and to grow your expertise at the intersection of risk, software, Compensation / Benefitsmedical and dental coveragepension and 401(k) planspaid time off options ResponsibilitiesExecute risk assessments, control design and testing across cloud platforms, microservices, and AI-enabled development environmentsCollaborate with IT, engineering and business stakeholders to deliver clear, actionable outputsDocument IT controls, processes, and environments ensuring deliverable qualityContribute to design and evaluation of controls across CI/CD, SDLC/PDLC, APIs, microservices, and data environmentsIdentify and assess risks within AI-enabled development environments and automated workflowsManage tasks and deliverables with emphasis on deadlines and quality Key requirementsBachelor's or Master's degree in business, accounting, computer science, engineering, or related fieldMinimum 3 years of experience in IT risk, Digital Risk, or technology consulting with TMT exposureHands-on experience with cloud platforms (e.g., AWS)Experience with microservices and distributed architecturesExperience with DevOps and CI/CD pipelinesExperience with IT general controls (ITGCs) and automated control environmentsUnderstanding of SOX and internal control applications in modern tech environmentsWillingness to travel at least 50% and work extended hoursClear communicationAttention to detailCollaborative teamworkCloud platforms (AWS or similar)Microservices and distributed architecturesDevOps and CI/CD pipelines
Not specified in the original listing.
Not specified in the original listing.
