Manager, Digital Risk in Edinburgh

At EY, you will have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. Join us and build an exceptional experience for yourself, and a better working world for all.

Our Digital Risk team is dedicated to providing innovative solutions that mitigate risks associated with digital transformation, cybersecurity, and regulatory compliance. The Digital Risk practice is growing rapidly, and we are looking for Managers to help drive success for our clients by helping them navigate the complexities of the digital landscape.

The opportunity

As a Manager in our Digital Risk team, you will play a key role in mitigating IT risks for our diverse set of clients. Our Digital Risk solutions include navigating IT controls assessments and implementations, cybersecurity management, digital resilience and technological continuity, the need for trusted AI in a rapidly evolving landscape, and more. This role requires strong IT technical and compliance expertise, a solid understanding of relevant regulatory frameworks, and strong project management and communication skills.

Your Key Responsibilities

• Manage and deliver Digital Risk projects and specific workstreams within larger Risk and Consulting engagements, ensuring projects are on time, within budget, and meet client expectations.
• Lead day-to-day client interactions, presenting findings, facilitating workshops, and building strong working relationships.
• Manage clients and oversee teams working to scope, assess and remediate or improve digital risk management strategies, compliance frameworks, and overall risk mitigation efforts.
• Draft and own risk assessments to identify vulnerabilities and recommend appropriate controls and solutions.
• Develop and implement relevant IT policies, processes, and procedures in line with client requirements and industry/compliance best practices.
• Support clients in navigating regulatory requirements and compliance audits, including risk mitigation strategies for digital technologies.
• Analyse and drive digital risk data and insights to drive informed decision-making and optimise risk management practices.
• Provide practical recommendations to clients on risk mitigation strategies, technology compliance, and other industry best practices.
• Own and manage the implementation of risk management tools and automation of processes using industry-leading platforms, including those that support AI governance when relevant.
• Lead or contribute to digital risk maturity assessments and process improvement initiatives.
• Develop and maintain documentation, reports, and dashboards for risk tracking and compliance monitoring, emphasising digital risks.
• Work cross-functionally with internal and client teams across IT, compliance, finance, and security to drive integrated risk management solutions.
• Coach and mentor junior team members, supporting their professional development and contributing to a positive team environment.
• Stay informed about industry trends, including regulatory changes, technology growth (including AI and cloud systems), and other relevant IT risk best practices.
• Contribute to the development of proposals and thought leadership materials under the guidance of senior leadership.

Skills and Attributes for Success

• Industry-leading understanding of digital risk frameworks, methodologies, and compliance requirements.
• Ability to interpret regulatory requirements and translate them into actionable business strategies for IT risks and opportunities.
• Proficiency in risk management tools and platforms (e.g. GRC platforms), ideally with experience in implementing and/or optimising these solutions.
• Experience in leading risk assessments and developing and implementing risk mitigation strategies.
• Strong analytical and problem-solving skills with experience in data-driven decision-making.
• Ability to manage and run multiple projects and stakeholders in a dynamic environment.
• Strong communication and presentation skills for executive reporting, stakeholder engagement, and internal team leadership.

To qualify for the role you should have

• Solid experience in digital risk management, IT governance, cybersecurity, or related fields; experience in AI would be an additional advantage.
• Professional certifications such as CISA, CISSP, or equivalent (preferred but not mandatory).
• Expertise in risk management tools and frameworks, as well as development of IT methodologies and practices.
• Familiarity with regulatory compliance requirements (e.g., UK Corporate Reform, SOx, GDPR, ISO 27001) and industry best practices.
• Experience working with IT, compliance, and vendor management teams.

What we look for

We are interested to hear from people who are motivated to form a part of a growing team, who embrace diversity and inclusion and who are market-oriented and ready to help our clients solve and control their biggest issues, risks and regulatory/compliance requirements.

What we offer

EY is committed to being an inclusive employer and we are happy to consider flexible working arrangements. We strive to achieve the right balance for our people, enabling us to deliver excellent client service whilst allowing you to build your career without sacrificing your personal priorities. While our client-facing professionals can be required to travel regularly, and at times be based at client sites, our flexible working arrangements can help you to achieve a lifestyle balance.

We offer a competitive remuneration package. Our comprehensive Total Rewards package includes support for flexible working and career development, and with FlexEY you can select benefits that suit your needs, covering holidays, health and well-being, insurance, savings and a wide range of discounts, offers and promotions.

Plus, we offer:

• Continuous learning: You will develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We will provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We will give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You will be embraced for who you are and empowered to use your voice to help others find theirs.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

The Exceptional EY Experience. It’s Yours To Build.

Apply Now

Please note: Prior to finalising your application, you will be asked to provide personal information across several dimensions of diversity and inclusiveness. The information you provide is kept entirely confidential and will not be used to evaluate your candidacy. We collect this data to help us analyse our recruitment process holistically and implement actions that promote diversity and inclusiveness. While optional, we encourage you to provide this information to hold us accountable towards our goal of building a better working world. We ask because it matters!