Job Description

The opportunity

EY’s Digital Risk practice is supporting leading Technology, Media & Telecommunications (TMT) companies as they scale cloud-native, AI-enabled, and platform-based operating models. Based in San Francisco, this role sits at the forefront of innovation, working with hyper-growth and global technology organizations operating on microservices architectures and AI-driven engineering environments

We are seeking a Senior Manager – Digital Risk to lead risk, compliance, and control transformation across highly automated and continuously evolving ecosystems. This role requires a unique combination of SOX expertise, cloud architecture fluency, and a strong understanding of modern software development, including AI-assisted coding and end-to-end product development lifecycles (PDLC/SDLC).

You will partner with CFOs, CTOs, platform engineering leaders, and AI/ML teams to embed scalable, audit-ready frameworks into complex environments—enabling organizations to scale securely, meet regulatory expectations, and build trust with stakeholders.

Your key responsibilities

As a Senior Manager in our Digital Risk practice, you will lead multiple complex Digital Risk engagements, overseeing end-to-end program delivery, engagement economics, and team performance across cloud-native environments. You will act as a trusted advisor to senior client stakeholders, driving risk and control transformation within modern technology ecosystems.

In this role, you will:

• Lead delivery of Digital Risk engagements across cloud platforms, microservices architectures, and AI-enabled development environments, including risk assessments, control design, and transformation initiatives
• Serve as a trusted advisor to senior stakeholders (e.g., CFO, CIO, CTO), delivering executive presentations and actionable recommendations
• Drive business development, engagement performance, and team leadership, including budgeting, forecasting, staffing, delivery quality, and oversight of technical risk areas
• Provide technical leadership as a subject matter expert, guiding teams on complex cloud, platform, and engineering risk considerations

• Design and evaluate controls across DevOps, CI/CD pipelines, SDLC/PDLC processes, and distributed platforms, including APIs, microservices, data environments, and AI-enabled systems

Skills and attributes for success

Demonstrate deep understanding of cloud-native architectures, distributed systems, and modern engineering practices, applying that knowledge to design scalable, practical control solutions and guide teams on complex digital risk challenges.

Exhibit an AI-aware risk mindset, identifying risks introduced by AI-assisted development and automated engineering workflows. Demonstrate architecture fluency, interpreting distributed systems, data flows, and platform dependencies to inform control design

Bring strong engineering credibility, effectively partnering with DevOps, platform engineering, and data teams within complex environments. Leverage deep TMT industry knowledge to anticipate emerging risks in high-growth, platform-based organizations.

Operate with strong executive presence, translating complex technical risks into clear business insights and actionable recommendations for senior stakeholders while maintaining focus on scalable, evolving control frameworks

Build strong client relationships, manage competing priorities, and consistently deliver high-quality outputs while driving innovation through automation and emerging technologies.

To qualify for the role you must have

• A bachelor’s or master’s degree in business, accounting, computer science, engineering, or related field.
• A minimum of 8 years of experience in Digital Risk, IT risk, or technology consulting, focused on TMT sector clients with deep industry knowledge.
• Strong hands-on experience in cloud platforms (AWS), microservices architectures, DevOps/CI-CD, SDLC/PDLC, and distributed systems.
• Experience designing and assessing ITGCs and automated controls in modern environments.
• Experience leading risk assessments, control testing, and transformation initiatives in cloud-native ecosystems.
• Ability to translate regulatory requirements into engineering-aligned controls.
• Exposure to data platforms and AI-enabled development environments.
• Willingness to travel at least 50% and work extended hours as needed. A valid passport is required.

Ideally, you’ll also have

Relevant certifications such as CPA, CISA, CISSP, CISM, AWS Certified Solutions Architect/Security with cloud or AI certifications preferred.

What we look for

We’re looking for leaders comfortable operating at the intersection of risk, engineering, and innovation, with the technical credibility to engage meaningfully in modern technology environments. This role is well-suited for individuals who thrive in fast-paced, high-growth, tech-centric settings and are motivated by solving complex, evolving industry challenges.

A forward-looking mindset and bias for action are critical, along with the ability to deliver scalable, high-impact solutions in rapidly evolving environments. Candidates who are naturally curious, adaptable, and energized by continuous change will be highly successful in this environment.