Join EY's Cyber Risk and Compliance Consulting (CRCR) team as a Third-Party Cyber Risk Management (TPCRM) Senior. This role offers a significant opportunity to contribute technically to cyber security engagements, manage TPCRM projects, and help clients effectively identify, assess, and mitigate risks within their third-party relationships. You will play a vital role in establishing and strengthening internal and external relationships, upholding EY's commitment to quality, and fostering a positive learning environment for junior team members. This position is instrumental in growing EY's TPCRM service offering and building an exceptional career.

As a TPCRM Senior, you will contribute to the growth of our cyber security practice while upholding EY's dedication to excellence. You'll ensure the highest quality in all deliverables and cultivate a supportive atmosphere for team development. This is an exciting opportunity to make a substantial impact and advance your career within a globally recognized organization.

Key responsibilities include conducting comprehensive risk assessments of third-party vendors, developing and updating risk management policies, and overseeing due diligence processes for cyber, privacy, and resiliency. You will collaborate cross-functionally with departments like Security, Legal, and IT, ensuring a holistic approach to risk. Prepare and present detailed reports on third-party risk exposure to senior leadership. Lead investigations into third-party incidents and breaches, and continuously enhance the TPCRM framework based on industry trends and regulatory changes.

Your role involves facilitating communication and training on best practices across the organization. You'll also maintain an incident response plan tailored for third-party risks and proactively identify trends through data analytics. Staying abreast of emerging risks and regulatory shifts is crucial for recommending framework improvements.

To excel in this role, you should possess 4-6 years of experience in cyber security, with a strong focus on Third-Party Risk Management, Cyber Governance, Risk, and Compliance, and Cyber Strategy. A foundational understanding of general security concepts, business continuity, and disaster recovery is essential. Experience in client-facing roles managing end-to-end TPCRM assessments is required.

We seek individuals with strong analytical and problem-solving abilities, meticulous attention to detail, and excellent communication skills. Proficiency in risk management software and data analysis tools is a plus. A bachelor’s degree in computer science, engineering, or a related field, along with a mandatory certification (CISSP, CISA, CISM, CTPRP, CTPRA, CIPP), is necessary. Knowledge of TPCRM tools and various cybersecurity domains is also required.