Location: San Francisco, San Jose, and San Mateo
The opportunityEY's Digital Risk practice is supporting leading
Technology, Media & Telecommunications (TMT) companies as they scale cloud-native, AI-enabled, and platform-based operating models. Based in San Francisco, this role provides the opportunity to work with high-growth and global technology organizations operating on
microservices architectures and AI-driven engineering environments.
We are seeking a
Senior Consultant to support risk, compliance, and control activities across modern, highly automated technology ecosystems. This role requires a strong foundation in
SOX, cloud environments, and software development practices, including exposure to AI-assisted development and product development lifecycles (PDLC/SDLC).
You will work with engagement teams and client stakeholders to support the design, assessment, and implementation of scalable, audit-ready risk and compliance frameworks within complex technology environments.
Your key responsibilitiesAs a Senior Consultant in our Digital Risk practice, you will contribute to the delivery of Digital Risk engagements, executing key activities across workstreams and supporting overall engagement objectives in cloud-native environments. You will work closely with Managers and Senior Managers, as well as client stakeholders, to deliver risk and control solutions within modern technology ecosystems.
In this role, you will:- Execute activities across cloud platforms, microservices architectures, and AI-enabled development environments, including risk assessments, control design, and testing
- Support engagement teams by working with client stakeholders (e.g., IT, engineering, and business teams) to deliver clear, accurate, and actionable outputs
- Perform analysis and documentation of IT controls, processes, and system environments, ensuring completeness and quality of deliverables
- Contribute to the design and evaluation of controls across DevOps, CI/CD pipelines, SDLC/PDLC processes, and distributed platforms, including APIs, microservices, and data environments
- Support identification and assessment of risks within AI-enabled development environments and automated engineering workflows
- Manage individual tasks and deliverables, maintaining accountability for deadlines, quality, and attention to detail
Skills and attributes for successDemonstrate foundational understanding of
cloud-native architectures, distributed systems, and modern engineering practices, and apply that knowledge to support control assessments and risk analysis.
Exhibit an
AI-aware mindset, recognizing risks associated with AI-assisted development and automation within engineering workflows. Demonstrate developing
architecture fluency, with the ability to interpret system components, data flows, and dependencies.
Build credibility with
engineering, DevOps, and data teams, collaborating effectively within technical environments. Apply knowledge of
TMT sector operating models to understand evolving risk considerations.
Communicate clearly and effectively, translating technical concepts into structured and understandable outputs for engagement teams and client stakeholders.
Operate with strong attention to detail, organization, and accountability, managing multiple priorities while contributing to high-quality deliverables.
To qualify for the role you must have:- A bachelor's or master's degree in business, accounting, computer science, engineering, or a related field
- A minimum of 3 years of experience in IT risk, Digital Risk, or technology consulting, with exposure to TMT sector clients or technology environments
- Hands-on experience or exposure to:
- Cloud platforms (e.g., AWS or similar environments)
- Microservices and distributed architectures
- DevOps and CI/CD pipelines
- Software development lifecycles (SDLC/PDLC)
- Experience supporting:
- IT general controls (ITGCs) and automated control environments
- Risk assessments, control testing, and documentation activities
- Engagements involving cloud-based or distributed technology systems
- Basic understanding of how control frameworks (e.g., SOX, internal controls) apply within modern technology environments
- Exposure to data platforms and AI-enabled development environments is a plus
- Willingness to travel at least 50%, including client-site travel. Flexibility to work extended hours as needed
Ideally, you'll also have:Relevant certifications (or progress toward) such as CISA, CPA, or cloud certifications (e.g., AWS)
What we look forWe're looking for individuals who are interested in building their experience at the intersection of
risk, engineering, and technology, and who are motivated to develop technical capabilities within modern, evolving environments.
The right candidate is detail-oriented, dependable, and able to work through complex problems while collaborating effectively with both technical and business stakeholders.
A proactive mindset, willingness to learn, and ability to deliver
high-quality, consistent outputs in fast-paced environments will be key to success.
What we offer you- The salary range for this job is:
- New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices - $125,800 to $209,700
- Bay Area California offices - $131,100 to $218,500
- All other offices locations in the US, including Sacramento - $104,800 to $192,200
- Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.
Are you ready to shape your future with confidence? Apply today. - To make the most of your application experience, please limit yourself to two applications within a six-month period.
- EY accepts applications for this position on an on-going basis.
- For those living in California, please click here for additional information.
- At EY, our values set the foundation for how we work and the behaviors we expect of our people. Any misrepresentation or falsification of information or lack of integrity at any point in the recruiting process may result in withdrawal of your candidacy, revocation of an offer or immediate termination of employment.
