Elevate your career at EY, a global leader dedicated to building a better working world. Join a supportive, inclusive culture and leverage cutting-edge technology to achieve your full potential. We seek your unique perspective to enhance our services and contribute to a globally connected environment. This role focuses on AI-driven third-party risk management, offering opportunities to shape innovative solutions.

As a Senior Consultant in AI Third Party Risk, you will independently manage complex Third Party Security Assessment (TPSA) engagements. You'll utilize deep expertise in TPRM frameworks, supply chain security, and risk lifecycle management, enhanced by AI tools for vendor scoring, risk prediction, and control monitoring. This position requires providing technical leadership, contributing to methodology enhancements, and guiding junior team members in delivering high-quality risk evaluations across various industries.

Lead and execute Third Party Security Assessments (TPSA) for critical and high-risk vendors. Conduct thorough vendor due diligence, including control gap analysis and regulatory compliance checks.

Manage the complete risk assessment lifecycle, from onboarding to periodic reviews and exit strategies. Design and refine assessment frameworks, questionnaires, and scoring aligned with industry standards like ISO 27001 and NIST CSF.

Perform detailed supply chain risk analysis, identifying dependencies and potential failure points. Apply AI-powered platforms to prioritize assessments and forecast vendor risk trends using predictive modeling.

Collaborate with procurement, legal, and business teams to integrate TPRM controls into vendor processes. Prepare comprehensive risk reports and remediation plans for diverse audiences.

Support the implementation of TPRM automation and AI-driven continuous monitoring solutions. Mentor Staff-level analysts, ensuring high-quality work and providing technical guidance.

A Bachelor's degree in engineering, technology, business, risk management, or a related field is required. Relevant certifications such as CISSP, CISM, CRISC, or CTPRP are advantageous.

We are looking for candidates with 4-8 years of experience in third-party risk management, cyber risk, or information security consulting. Proven experience in end-to-end Third-Party Security Assessments and a strong understanding of TPRM frameworks are essential.

Expertise in supply chain risk management, including vendor tiering and dependency mapping, is crucial. Familiarity with the application of AI in TPRM, including AI-enabled vendor risk scoring tools and predictive modeling, is highly valued.

Experience with GRC platforms for workflow management and proficiency in data analytics and BI tools like Power BI, Tableau, or Python are necessary. Strong analytical, written, and presentation skills are expected for effective communication with both technical and executive audiences.