Location: Charlotte

The Opportunity

EY's Third Party Risk Management (TPRM) practice helps organizations improve and operate third-party risk programs through program transformation, risk assessments, technology enablement and managed services. As a TPRM Delivery Senior in the EY Service Delivery Center (SDC) in Charlotte, you will be a hands-on member of client delivery teams, supporting consistent execution, quality and transparency across TPRM engagements.

This role combines project management support, reporting and analytics, quality control review, and direct execution of third-party risk assessments. You will work with engagement leaders, client stakeholders, assessors and other delivery team members to keep work progressing, identify risks and issues, and deliver accurate, timely work products.

Your key responsibilities:

• Support day-to-day delivery of client TPRM engagements, including work planning, status tracking, action and issue management, dependency tracking, meeting coordination and follow-up.
• Prepare clear, accurate and timely status reports, dashboards, metrics and management updates covering assessment volumes, aging, throughput, quality, risks, issues, remediation progress and other engagement measures.
• Maintain project documentation and delivery artifacts, including trackers, procedures, job aids, meeting materials, decision logs and supporting evidence.
• Coordinate with engagement leadership, client stakeholders, third parties, risk subject-matter resources and global delivery teams to obtain inputs, resolve questions and keep deliverables on schedule.
• Execute third-party risk assessments when needed, including reviewing questionnaires and evidence, evaluating control design and implementation, documenting conclusions, identifying gaps, drafting findings and supporting remediation activities.
• Perform quality control reviews of third-party risk assessments and related work products for completeness, accuracy, consistency, evidence sufficiency and alignment with client methodology and procedures.
• Provide actionable feedback to assessors, track corrections to closure and identify recurring quality themes that may require clarification, coaching or process improvement.
• Apply knowledge of key third-party risk domains, including information security, data protection, business continuity and resiliency, technology, compliance and other operational risks relevant to the engagement.
• Use the designated TPRM AI enabler and other approved AI tools to support delivery activities such as information synthesis, questionnaire and evidence review, drafting, analysis and quality checks, while applying professional judgment and following applicable EY and client requirements.
• Communicate delivery risks, issues, decisions and recommendations to project teams and client stakeholders; escalate matters promptly when appropriate.
• Analyze data and recurring operational themes, support root cause analysis, and recommend practical improvements to processes, controls, workflows, reporting and use of technology.
• Work effectively across multiple engagements, priorities and time zones while maintaining attention to detail, responsiveness and a strong focus on client service.

Skills and attributes for success:

• Strong working knowledge of TPRM lifecycle activities, assessment methodologies and common risk domains.
• Technical strength in evaluating controls, evidence and risk information and translating analysis into concise, supportable conclusions.
• Ability to perform and review assessments with a consistent focus on quality, accuracy and adherence to defined methodology.
• Project coordination and PMO capabilities, including disciplined tracking, prioritization, organization and follow-through.
• Ability to develop meaningful metrics and reports, analyze trends and clearly communicate the story behind the data.
• Strong written and verbal client communication skills, including the ability to explain technical or risk concepts clearly and facilitate productive working sessions.
• Relationship-building and collaboration skills across client, third-party and internal teams.
• Good judgment, critical thinking and problem-solving skills, including the ability to recognize when an issue requires escalation.
• Comfort learning and using TPRM platforms, reporting tools, collaboration tools and AI-enabled solutions.
• Ability to manage concurrent activities and deadlines in a fast-paced, team-based delivery environment.
• Curiosity, learning agility and a continuous-improvement mindset.

To qualify for the role, you should have:

• A bachelor's degree or equivalent relevant work experience.
• A minimum of 3+ years of relevant TPRM experience, including experience supporting or performing third-party risk assessments within industry or professional services.
• Experience with one or more aspects of TPRM delivery, such as PMO coordination, management reporting, quality review, due diligence, ongoing monitoring, issue management or remediation tracking.
• Proficiency with Microsoft Office tools, particularly Excel, PowerPoint, Word, Outlook and Teams.
• Availability to work from the EY Service Delivery Center in Charlotte, North Carolina, consistent with role and business requirements.
• Flexibility to support client teams operating across multiple time zones and to travel occasionally when engagement needs are required.

Ideally, you'll also have:

• A degree in business, risk management, supply chain management, information systems, cybersecurity, engineering or a related discipline.
• Experience with TPRM or governance, risk and compliance platforms such as ProcessUnity, ServiceNow, Archer, Aravo, OneTrust or similar solutions.
• Experience developing dashboards, metrics and reporting using Excel, Power BI or comparable tools.
• Familiarity with common risk and control frameworks or standards, such as NIST, ISO 27001, COBIT or other relevant industry frameworks.
• Experience using generative AI or other AI-enabled tools in a professional setting, including the ability to construct effective prompts, validate outputs and apply appropriate human review.
• A relevant professional certification, such as CRISC, CTPRP, CTPRA, CISA, CISSP, CISM, CBCP, CIA, CIPP or a comparable credential.

What we look for

We are looking for a technically capable, dependable and collaborative professional who takes ownership of delivery, builds trust with clients and teammates, and balances speed with quality. The successful candidate will be comfortable moving between detailed assessment work and broader engagement coordination, using data and approved technology to improve outcomes while maintaining sound professional judgment.

What working at EY offers

At EY, you will have opportunities to build deep TPRM delivery experience, learn from multidisciplinary teams, expand your technical and client-service capabilities, and contribute to the continued growth and innovation of our managed services practice. You will receive coaching, feedback and on-the-job development while working with colleagues focused on quality, collaboration and delivering value for clients.

• The salary range for this job is:
  • New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices - $63,500 to $117,800
  • Bay Area California offices - $66,200 to $122,700
  • All other offices locations in the US, including Sacramento - $52,900 to $108,100
• Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.

Are you ready to shape your future with confidence? Apply today.

• To make the most of your application experience, please limit yourself to two applications within a six-month period.
• EY accepts applications for this position on an on-going basis.
• For those living in California, please click here for additional information.
• At EY, our values set the foundation for how we work and the behaviors we expect of our people. Any misrepresentation or falsification of information or lack of integrity at any point in the recruiting process may result in withdrawal of your candidacy, revocation of an offer or immediate termination of employment.