Governance, Risk & Compliance Consultant – AI, Digital & Cyber

About the role

As a Senior Consultant in EY’s Digital Risk Consulting team, you will help organisations across New Zealand identify, assess and manage digital, AI and cyber risks. You will work on a variety of industry engagements, strengthening governance, risk and compliance frameworks and supporting the responsible use of emerging technologies.

Key responsibilities

• Conduct digital, AI and cyber risk assessments, including maturity reviews, control assessments and risk workshops.
• Design and implement risk frameworks aligned with client objectives, risk appetite and regulatory expectations.
• Analyse client processes, systems, controls, policies and governance to pinpoint risk areas and improvement opportunities.
• Advise clients on regulatory and compliance requirements such as ISO 27001, SOC reporting, NIST, NZISM and emerging AI governance.
• Prepare high‑quality deliverables – reports, presentations, control documentation and client‑ready recommendations.
• Collaborate with engagement managers and senior team members to meet project timelines and quality standards.
• Build relationships with client stakeholders and communicate technical risk matters to both technical and non‑technical audiences.
• Coach junior team members, review their work and contribute to a collaborative team environment.

Required profile

• Experience in cybersecurity, digital risk, AI risk management, technology risk, IT audit or technology assurance within consulting, professional services or a large enterprise.
• Strong understanding of governance, risk and compliance concepts, technology controls, data governance and responsible AI.
• Ability to analyse complex processes and communicate findings clearly.

Required skills

• Cybersecurity
• Digital risk assessment
• AI risk management
• IT audit
• Knowledge of ISO 27001, SOC reporting, NIST, NZISM frameworks