Join EY and build a distinguished career where your unique perspective is valued, contributing to a better working world. This Senior Consultant role focuses on AI Third Party Risk, requiring expertise in managing complex vendor ecosystems and leveraging AI for risk assessment and monitoring. You will be instrumental in delivering high-quality risk evaluations across various industries and enhancing our methodology.

This position offers the opportunity to shape innovative approaches to third-party risk management, utilizing cutting-edge AI tools to drive efficiency and effectiveness. You'll collaborate with global teams and contribute to EY's mission of creating long-term value for clients and society.

Lead and execute comprehensive Third Party Security Assessments (TPSA) for critical vendors. Manage the complete risk assessment lifecycle, from onboarding to exit, including due diligence, control gap analysis, and compliance validation.

Design and refine assessment frameworks and scoring rubrics aligned with industry standards like ISO 27001 and NIST CSF. Analyze supply chain risks, identifying dependencies and critical failure scenarios, while applying AI-enabled scoring platforms for threat prioritization. Prepare detailed risk reports and remediation recommendations for diverse audiences.

Support the implementation of AI-driven automation and continuous monitoring for TPRM. Mentor junior analysts and contribute to the continuous improvement of assessment methodologies and automation initiatives.

A Bachelor's degree in Engineering, Technology, Business, Risk Management, or a related field is essential. Possess 4–8 years of experience in third-party risk management, cyber risk, or information security consulting.

Demonstrate in-depth knowledge of TPRM frameworks, supply chain risk management, and the application of AI in TPRM processes. Experience conducting control gap analysis against standards such as ISO 27001, SOC 2, and NIST CSF is required. Familiarity with GRC platforms and AI-enabled vendor risk scoring tools is crucial.

Strong analytical, written, and presentation skills are necessary for communicating complex risk findings effectively. Experience with data analytics and BI tools like Power BI, Tableau, or Python is advantageous. An understanding of AI governance frameworks and ethical AI considerations is also important.