Join EY and build a career where your unique voice and perspective contribute to a better working world. As part of the EY-NFS TPRM team, you'll help clients enhance business performance by translating strategies into reality. This Senior role in Risk Supplier Services (RSS) offers a fantastic opportunity to join a leading firm and be instrumental in the growth of a new service offering.

We are seeking experienced Seniors with expertise in Third-Party Risk Management (TPRM) to join the leadership group of our RSS team. This is a chance to work with high-performing EY teams, helping clients grow, innovate, protect, and optimize their business operations.

Key responsibilities include leading and collaborating with managers on TPRM engagements, mentoring team members in client interactions, and performing quality checks on work products. You will facilitate process walkthroughs, document business processes, and assess the application of legal and regulatory requirements to client TPRM practices.

Further duties involve leading participation in technology enhancements like automation and AI for TPRM, assisting in the selection of methodologies and tools, and building strong client relationships. You will also contribute to identifying profitability improvements, supporting business development initiatives, and fostering internal relationships across GMS and other EY services.

To qualify, candidates need 4 to 8 years of demonstrated experience in risk management across the third-party engagement lifecycle, including pre-contracting, contracting, and post-contracting. A strong understanding of TPRM frameworks, risk management, and information security practices is essential, along with familiarity with contract risk review processes.

Hands-on exposure to TPRM tools and technology solutions (e.g., GRC enablement solutions like Process Unity, Prevalent, Archer, ServiceNow) is required. Knowledge of standards such as ISO 27001/2, ISO 22301, and privacy regulations like GDPR and CCPA is also necessary. A good understanding of networking, security concepts, operating system security, IT infrastructure, and security architecture design is expected. Familiarity with OWASP, Secure SDLC, incident management, and disaster recovery is beneficial. Prior Big-4 experience and relevant certifications are considered advantageous.