Director - Technology Risk

About the Role

EY invites an experienced Technology Risk Director to join its Global Internal Audit team as an Audit Leader. This unique position operates on a global executive scale, emphasizing leadership growth within a diverse, inclusive environment. The role focuses on mitigating risks amid a fast-evolving digital landscape affecting global systems and regional processes, ensuring regulatory compliance, and driving innovation and continuous improvement within EY’s vast organization.

This position requires flexibility for international travel and accommodating global time zones, but relocation is not mandatory.

Key Responsibilities

• Assist the Chief Audit Executive in building a technology risk presence that assures EY’s strategic technology platforms (such as AI, digital platforms, Mercury, and SAP) are secure and effective.
• Design and lead a technology-focused internal audit plan, covering risk assessments and strategic approaches to emerging cyber risks, digital compliance, data governance, and process risks, including ongoing monitoring and future audit coverage.
• Lead audits and advisory projects addressing IT risk management, cybersecurity, regulatory compliance (ISO, PCI, Privacy standards), program risk, resilience, data governance, and responsible AI.
• Evaluate key technology environments, applications, systems, and controls to support risk-aligned audit planning and execution.
• Manage comprehensive audit delivery from planning through reporting, adhering to Global Internal Audit methodologies.
• Promote innovation by leveraging data analytics, automation, and best practices to improve audit effectiveness and insights.
• Develop trusted relationships with senior management, audit sponsors, and stakeholders to ensure transparency, alignment on risks, and uphold audit objectivity and professionalism.
• Produce thorough, clear audit reports highlighting risks, findings, and actionable recommendations consistent with reporting standards and stakeholder expectations.
• Enhance the technology audit team by recruiting, mentoring, and fostering a collaborative, skilled environment with continuous technical development.

Candidate Profile and Skills

The ideal candidate has extensive experience in technology risk leadership, cybersecurity, technology governance, internal audit, and risk management. They will demonstrate:

• Expertise across IT governance, cybersecurity, digital compliance, ERP systems, business resilience, data governance, and responsible AI.
• Proven leadership managing complex global projects and audits, with the ability to build stakeholder trust and deliver insightful risk-based guidance.
• Ability to nurture an inclusive and innovative team through coaching and mentoring.
• Competence in delivering high-quality audit projects within timeline and budget constraints while actively managing emerging risks.
• Excellent communication skills providing practical, actionable risk-related insights.
• Ongoing awareness of technology, business, and industry trends relevant to risk landscape evolution.

Qualifications and Experience

• Bachelor's degree or equivalent in a related field with approximately 15+ years’ relevant experience in technology risk, internal audit, risk management, or public accounting within large global organizations.
• At least 10 years in leadership roles with demonstrated proficiency in:
  • Technology-enabled Integrated Risk Management (IRM) or Governance, Risk and Compliance (GRC) frameworks.
  • Portfolio, program, and project risk management consulting or assurance.
  • Regulatory compliance (including Privacy, SoCI Act, SoX, Spam Act).
  • Business and technology resilience program design and implementation.
  • AI governance and responsible AI practices.
  • Internal controls and audit (controls optimization, SoX compliance).
  • Technology-centric assurance (IT general controls, cybersecurity, AI governance).
• Certifications such as CISSP, CISM, CCSP, or CISA are preferred; support will be provided for obtaining these if not currently held.

Compensation and Benefits

EY offers a competitive salary ranging in the US from $214,300 up to $424,300, with regional adjustments (e.g., New York City Metro Area up to $482,100). The remuneration package includes a discretionary bonus, comprehensive medical and dental coverage, retirement plans, flexible vacation policy, paid personal and statutory holidays, and other benefits supporting holistic well-being.

Work arrangements follow a hybrid team-led, leader-enabled model, expecting 40–60% onsite collaboration over projects or yearly engagements. EY fosters a culture supportive of individual work style preferences.

Diversity and Inclusion

EY values diversity and inclusiveness, striving to create a workplace that honors differences and promotes equity. The company is committed to combating systemic racism, supporting gender equity, the 2SLGBTQIA+ community, neurodiversity, accessibility, and Indigenous peoples' reconciliation efforts. Inclusive policies enhance belonging and empower employees to thrive authentically.

Additional Information

This role involves responsible use and ethical application of AI during recruitment. Reasonable accommodations for disabilities are provided during the hiring process upon request.