Senior Cybersecurity AI Risk and Governance Consultant

Responsibilities

• Support clients in the design, assessment, and implementation of AI governance and AI risk management frameworks.
• Evaluate the maturity, effectiveness, and compliance of AI systems against emerging regulations, ethical principles, and industry standards.
• Lead or contribute to AI risk identification and assessment, covering model risks, data risks, and AI security threats.
• Support the development of AI control frameworks, operating models, and risk mitigation plans.
• Manage third-party AI risks, including assessments of AI vendors and foundation models.
• Communicate complex AI risks and technical concepts to non-technical audiences and executive management.

Requirements

• Minimum 5 years of experience in cybersecurity or technology risk management.
• Hands-on experience or strong exposure to AI-related governance and risk management.
• Proven ability to perform AI risk assessments (model risk, data privacy, and security threats).
• Understanding of Third-Party Risk Management (TPRM) in the context of AI solutions.
• Excellent command of the English language.
• Strong analytical, problem-solving, and stakeholder management skills.

Preferred Qualifications

• Relevant certifications such as CISSP, CISM, CRISC, ISO/IEC 42001, or ISO/IEC 27001.
• Knowledge of AI-related regulatory requirements, including the EU AI Act, GDPR, DORA, and NIS2.
• Experience working with AI governance operating models and lifecycle controls.

Benefits

• Continuous learning opportunities to develop new skills and mindsets.
• Flexible tools and environment to make a meaningful impact.
• Access to transformative leadership and professional coaching.
• A diverse and inclusive global work culture.

About the Company

EY is a global leader in assurance, consulting, strategy, tax, and transactions. EY GDS is a dynamic global delivery network that collaborates with teams across the world to help clients navigate complex challenges and build a better working world.