Join EY and shape a career tailored to you, leveraging global scale, supportive culture, and advanced technology. Your unique perspective is vital to enhancing EY and building a better working world for everyone. This role focuses on managing governance, controls, and compliance for enterprise platforms supporting data products and corporate finance transformation.

This position blends platform governance, risk coordination, and leadership to ensure secure, reliable, and well-controlled platform services. Collaborate with platform engineering, operations, security, architecture, and business teams to integrate practical governance into services for P2P, O2C, R2R, and FP&A. You'll oversee governance reviews, maintain control and exception records, monitor adherence to standards, and support audit readiness within your platform scope, enabling delivery teams while escalating risks.

EY builds a better working world by creating long-term value for clients, people, and society, fostering trust in capital markets. Our diverse global teams drive trust through assurance and help clients grow, transform, and operate, asking better questions to find new answers for today's complex issues.

Oversee the platform governance framework, control inventory, ownership matrix, and review calendar in line with enterprise policies and standards. Translate approved policies into practical control requirements and evidence expectations for platform lifecycle stages. Coordinate governance reviews for new services and significant changes, tracking approvals and control gaps before release. Maintain platform and service inventories with accountable owners and criticality classifications, validating periodically. Administer policy exceptions and risk registers, documenting rationale, controls, owners, and expiry dates.

Plan and coordinate risk-based governance and control review activities, prioritizing critical platforms and overdue findings. Collect and verify evidence for control self-assessments, supporting independent assurance and audit teams. Track and report on control coverage, review completion, remediation progress, and exceptions, escalating material issues. Coordinate remediation plans with control owners and monitor milestones. Partner with security, privacy, legal, and data governance teams to map obligations to platform controls.

Lead a team of governance analysts, assigning responsibilities for reviews and evidence management. Foster a culture of accountability, constructive challenge, and collaboration. Manage capacity planning, onboarding, performance feedback, and training for the team. Coach team members on control assessment, evidence quality, risk documentation, and communication. Partner with finance stakeholders and platform owners to understand business criticality and control needs. Coordinate with architecture, engineering, operations, security, and risk teams to resolve governance gaps. Facilitate governance forums, prepare decision papers, and track actions. Communicate governance status, risks, exceptions, and remediation progress to management and stakeholders.

Standardize reusable control checklists, templates, and workflows to enhance consistency. Collaborate with engineering teams to automate control monitoring and evidence collection using policy-as-code and dashboards. Review lessons learned from incidents and audits to recommend framework improvements and track resilience testing.

A Bachelor's degree in Information Technology, Computer Science, Engineering, Information Systems, or a related field, or equivalent practical experience, is required. You'll need over 7 years of experience in technology governance, platform operations, IT risk, compliance, or technology controls, specifically managing enterprise platform governance. At least 2 years of experience in team leadership or people management, with a proven track record of coordinating cross-functional control reviews and developing governance or operations teams, is also essential.

Possess working knowledge of at least one major cloud platform (Azure, AWS, or GCP) and its governance capabilities, including resource organization, policy enforcement, identity, and audit logging. Demonstrate an understanding of enterprise platform services, cloud infrastructure, data platforms, and service lifecycle management to assess control coverage. Experience with control inventories, risk and exception registers, evidence repositories, and GRC or IT service management tools is necessary. Working knowledge of CI/CD, infrastructure as code, configuration management, and policy-as-code concepts is expected. Familiarity with access governance, segregation of duties, data classification, encryption, logging, retention, vulnerability management, and third-party technology risk is also required.

Showcase a proven ability to coordinate risk-based control reviews, audit preparation, issue remediation, and governance reporting across multiple stakeholder groups. Be familiar with relevant frameworks such as COBIT, ITIL, ISO/IEC 27001, or NIST. Strong planning, documentation, analytical, and follow-through skills are crucial, including the ability to interpret control metrics. Exposure to corporate finance processes (P2P, O2C, R2R, and FP&A) is preferred. Strong team supervision, workload planning, coaching, and cross-functional coordination skills are key behavioral requirements. Clear stakeholder communication abilities are essential for explaining control gaps and risk implications to both technical and non-technical audiences. Exercise sound judgment, challenge constructively, and balance proportionate governance with efficient delivery. Maintain a high ownership mindset focused on control effectiveness and continuous improvement.