Embark on an exciting career journey at EY, where you'll have the opportunity to grow with global support and an inclusive culture. We are seeking a passionate, tech-savvy professional with a strong risk mindset to join our dynamic Enterprise Risk team. This role focuses on Artificial Intelligence (AI) Risk Management and Governance, encompassing areas like AI auditing, risk and controls, pre-implementation reviews, data privacy, AI application security, and business continuity planning for AI applications.

This client-facing position is within a rapidly expanding practice. You will cultivate strong client relationships with key stakeholders, including executives from globally recognized brands. This is an ideal environment to gain deep insights into complex business transactions while recommending innovative solutions to critical business challenges and process inefficiencies.

Key responsibilities include consistently delivering high-quality client services and work products within established timelines and budgets. You will effectively monitor progress, manage risks, and ensure stakeholders are informed of project status and expected outcomes.

Foster collaborative relationships with client personnel to analyze, evaluate, and enhance information systems, thereby improving security at both procedural and technological levels. Utilize your knowledge of current IT environments, AI models, applications, and industry trends to identify engagement and client service issues. Effectively communicate these insights to the engagement team and client management through written correspondence and presentations. Continuously stay informed about relevant business and industry trends impacting the client's business.

To excel in this role, leverage your proven experience in technology and business process internal audits, combined with strong interpersonal skills. You will be instrumental in delivering quality results for the assessment, design, and implementation support of AI Risk solutions.

Key qualifications include a Bachelor's or Master's degree with 3-6 years of relevant work experience. A minimum of 2-4 years of experience in internal audit, risk, and compliance for both business and IT audits is essential, with a solid understanding of AI-related risks and governance practices.

Responsibilities will involve IT pre- and post-implementation reviews, model risk management, AI compliance and regulatory assessments, and risk assessments for applications and infrastructure. You will develop risk control matrices aligned with frameworks like EU AI Act, COBIT, ISO, NIST, and ITIL best practices. Control monitoring and testing against cyber and compliance standards (e.g., PCI, ISO27001) are also key. Identifying confidentiality, integrity, and availability deficiencies, assessing IT infrastructure and architecture risks, and identifying control automation opportunities are crucial. Excellent communication, documentation, and report writing skills are mandatory.

Functional understanding of foundation models (LLMs) and associated risks, along with awareness of the AI deployment lifecycle, is required. Knowledge of Responsible AI principles, AI Ethics, and AI Assurance is beneficial. The ability to identify process-level risks arising from AI use and develop mitigation strategies is important. Relevant industry certifications such as AIGP, ISO 42001, CISA, CISM, CISSP, CRISC, CCSK, or ISO 27001 are considered advantageous.