Description:
As a Senior Manager based either in Sydney, Melbourne, or Brisbane you will join the Risk Consulting team to support leading organisations in the public and private sector across TPRM and risk focused engagements. You will join the team to help translate uncertainty into confidence. You will help clients improve their resilience across their business, in a wide variety of ways, from conducting current state assessments and advising on strategy and risk buy-down initiatives, to designing and building transformation programmes and specific resilience solutions.
What you’ll be doing:
Support the end-to-end deliver of resilience and security focused services for large and complex projects. In summary, you will:
- Lead a team of Third-Party Risk Management (TPRM) professionals to drive the delivery of TPRM based engagements including the building of TPRM capabilities or the review of client’s current capabilities
- Support the development, refinement and delivery of TPRM focused solutions, tools, and processes, creating value and minimising risk for clients
- Join a fast-paced, credentialed team to deliver an increasingly demanded solution and have an opportunity to collaborate across EY to work with a diverse range of clients
- Help our clients identify, evaluate, and manage third-party risks (such as cyber, privacy, resilience/business continuity, regulatory and compliance, financial, operational, reputational, etc.) across the third-party management life cycle.
What We’re Looking For
Here’s our ‘wish list’ but don’t worry if you don’t tick all the boxes. We’re interested in your strengths, what you want to learn, and how far you want to go.
- 10+ years’ experience in consulting, either within a consulting firm or demonstrated experience in-house running a TPRM program
- Proficiency and understanding of risk management, risks and controls concepts
- Third-party risk management knowledge, along with audit experience and project management
- Experience with current state assessment/diagnostic, design & build, enhancement and implementation of third-party risk management programs including governance & oversight, third-party inventory, risk approach and models, policies and standards, TPRM processes and technology, automation and reporting
- Experience in planning, executing and reporting third-party risk assessments (Australian-based and international third parties)
- Knowledge and experience related to the diverse set of risks associated to third parties such as geopolitical risk, reputational risk, financial risk, regulatory and compliance risk, digital risk, cyber and privacy risk, operational risk, strategic risk and business continuity & resiliency risk
- An understanding of and/or implementation experience with a variety of TPRM and/or GRC tools and technologies (e.g., Archer, ServiceNow, SAP, ProcessUnity, Prevalent, etc.)
- Knowledge of principles of ERM and GRC concepts. information security and data privacy, leading security standards (e.g., ISO27001, NIST), certification reports (SOC 1, SOC 2, etc.) and control frameworks (e.g., COSO, ISO, etc.)
- Knowledge of any of the following industries/sectors: consumer products & retail, technology & telecom, power & utilities, healthcare, life sciences, including relevant regulatory requirements (e.g., SoCI, Privacy Act, etc.)
- We are also looking for individuals who have knowledge and experience complimentary to TPRM such as Enterprise Resilience, GRC, Regulatory and Compliance and/or Risk Management
- Experience managing key accounts and client relationships including business development, tender and proposal creation and sales
- Self-motivated, positive attitude and lots of energy and drive and ability to support, mentor and motivate junior team members
- Experience in managing a team (onshore and/or offshore) and various projects or processes to completion
- Proven solid analytical and problem-solving skills; excellent writing and communication skills.