Join EY and build a career that's as unique as you are. Leverage global scale, support, and an inclusive culture to reach your full potential. Your distinctive voice is vital to enhancing EY's impact. Contribute to an exceptional experience for yourself and foster a better working world for everyone.

This Contract Risk Lead role within Delivery Excellence, Quality, and Risk Management at GDS Consulting is instrumental in safeguarding engagements. The position focuses on the comprehensive assessment, governance, and ongoing monitoring of contractual, regulatory, privacy, security, operational, AI, and delivery risks.

The core objective is to ensure that all contract obligations, regulatory mandates, client-specific commitments, and internal risk policies are clearly understood, effectively implemented, and continuously overseen throughout an engagement's lifecycle. Collaboration is key, involving close partnerships with Legal, Quality & Risk Management, Data Privacy, Information Security, Delivery Excellence, ODC, AI Governance, and various Engagement teams.

This role proactively identifies potential risks, provides strategic mitigation guidance, and supports the delivery of services that are predictable and fully compliant. It's an opportunity to shape risk strategy and ensure robust adherence to standards in a dynamic consulting environment.

Oversee contract risk assessment and governance by reviewing various agreements like SOWs, MSAs, and change requests. Identify contractual impacts on delivery, security, privacy, staffing, and operations, translating them into actionable controls. Maintain records of contract risks, exceptions, and mitigation strategies, providing risk sign-offs for complex engagements.

Ensure data privacy and regulatory compliance by assessing contracts for privacy obligations and evaluating requirements under GDPR, UK GDPR, EU AI Act, DORA, and local regulations. Integrate compliance needs into delivery plans and support privacy impact assessments and cross-border data transfer reviews.

Manage AI risk and responsible AI compliance by evaluating contractual stipulations for AI, GenAI, and Machine Learning. Identify AI-specific obligations such as transparency, model governance, and data usage, collaborating with AI governance teams on compliance with emerging regulations.

Uphold information security and data protection by assessing engagement adherence to security policies, client requirements, and data handling standards. Validate commitments to privacy, security, and confidentiality, participating in security reviews and compliance assessments.

Govern Offshore Delivery Centers (ODCs) and prepare for audits by reviewing ODC-related clauses. Support ODC setup governance and compliance validation, ensuring operational controls align with contractual commitments. Drive ODC readiness reviews, audits, and remediation efforts.

Mitigate delivery and operational risks by assessing risks stemming from resource location, client-specific controls, segregation needs, staffing, and subcontractor usage. Work with Delivery Excellence teams to embed contractual obligations into project governance, identifying and preventing risks early.

Establish and monitor compliance through risk control frameworks for high-risk engagements. Conduct periodic reviews of contractual, data privacy, security, AI, and ODC compliance. Support audits, track remediation plans, and ensure risk closure.

To excel in this role, a Bachelor's degree is essential. A Master's degree, Law degree, or a qualification in Risk/Compliance is highly preferred.

This position requires 10 to 15 years of comprehensive experience in contract management, risk management, data privacy, regulatory compliance, and information security governance, ideally within consulting or professional services settings.

Demonstrated expertise in contract interpretation, commercial risk assessment, regulatory analysis, and negotiation support is critical. Strong capabilities in enterprise risk management, compliance assessments, audit management, and risk reporting are also vital.

Proficiency in data privacy principles, including GDPR, privacy-by-design, cross-border data transfers, cybersecurity controls, and data classification, is expected. Familiarity with AI governance frameworks, the EU AI Act, responsible AI principles, and AI risk assessments is crucial.

Excellent executive communication, stakeholder influence, and the ability to make decisions amidst ambiguity are key leadership skills. The capacity to translate complex legal and regulatory requirements into practical, actionable delivery controls is a defining characteristic of successful candidates.