Risk Consulting - Digital Risk (Cloud, AI, & Platforms) - Senior Consultant - Bay Area
Role details
Job location
Tech stack
Job description
We are seeking a Senior Consultant to support risk, compliance, and control activities across modern, highly automated technology ecosystems. This role requires a strong foundation in SOX, cloud environments, and software development practices , including exposure to AI-assisted development and product development lifecycles (PDLC/SDLC).
You will work with engagement teams and client stakeholders to support the design, assessment, and implementation of scalable, audit-ready risk and compliance frameworks within complex technology environments., As a Senior Consultant in our Digital Risk practice, you will contribute to the delivery of Digital Risk engagements, executing key activities across workstreams and supporting overall engagement objectives in cloud-native environments. You will work closely with Managers and Senior Managers, as well as client stakeholders, to deliver risk and control solutions within modern technology ecosystems.
In this role, you will:
- Execute activities across cloud platforms, microservices architectures, and AI-enabled development environments , including risk assessments, control design, and testing
- Support engagement teams by working with client stakeholders (e.g., IT, engineering, and business teams) to deliver clear, accurate, and actionable outputs
- Perform analysis and documentation of IT controls, processes, and system environments , ensuring completeness and quality of deliverables
- Contribute to the design and evaluation of controls across DevOps, CI/CD pipelines, SDLC/PDLC processes, and distributed platforms , including APIs, microservices, and data environments
- Support identification and assessment of risks within AI-enabled development environments and automated engineering workflows
- Manage individual tasks and deliverables, maintaining accountability for deadlines, quality, and attention to detail
Requirements
Demonstrate foundational understanding of cloud-native architectures, distributed systems, and modern engineering practices , and apply that knowledge to support control assessments and risk analysis.
Exhibit an AI-aware mindset , recognizing risks associated with AI-assisted development and automation within engineering workflows. Demonstrate developing architecture fluency , with the ability to interpret system components, data flows, and dependencies.
Build credibility with engineering, DevOps, and data teams , collaborating effectively within technical environments. Apply knowledge of TMT sector operating models to understand evolving risk considerations.
Communicate clearly and effectively, translating technical concepts into structured and understandable outputs for engagement teams and client stakeholders.
Operate with strong attention to detail, organization, and accountability, managing multiple priorities while contributing to high-quality deliverables.
To qualify for the role you must have
A bachelor's or master's degree in business, accounting, computer science, engineering, or a related field
A minimum of 3 years of experience in IT risk, Digital Risk, or technology consulting , with exposure to TMT sector clients or technology environments
Hands-on experience or exposure to:
- Cloud platforms (e.g., AWS or similar environments)
- Microservices and distributed architectures
- DevOps and CI/CD pipelines
- Software development lifecycles (SDLC/PDLC), * IT general controls (ITGCs) and automated control environments
- Risk assessments, control testing, and documentation activities
- Engagements involving cloud-based or distributed technology systems
Basic understanding of how control frameworks (e.g., SOX, internal controls) apply within modern technology environments
Exposure to data platforms and AI-enabled development environments is a plus
Willingness to travel at least 50%, including client-site travel. Flexibility to work extended hours as needed
Ideally, you'll also have
Relevant certifications (or progress toward) such as CISA, CPA, or cloud certifications (e.g., AWS)
What we look for
We're looking for individuals who are interested in building their experience at the intersection of risk, engineering, and technology , and who are motivated to develop technical capabilities within modern, evolving environments.
The right candidate is detail-oriented, dependable, and able to work through complex problems while collaborating effectively with both technical and business stakeholders.
A proactive mindset, willingness to learn, and ability to deliver high-quality, consistent outputs in fast-paced environments will be key to success.
Benefits & conditions
At EY, we'll develop you with future-focused skills and equip you with world-class experiences. We'll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more .
- We offer a comprehensive compensation and benefits package where you'll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job in all geographic locations in the US is $104,800 to $192,200. The base salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is $125,800 to $218,500. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.
- Join us in our team-led and leader-enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year.
- Under our flexible vacation policy, you'll decide how much vacation time you need based on your own personal circumstances. You'll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.