Staff - Risk Supplier Services (RSS)

About the opportunity

EY is looking for a Staff-level professional to join its Risk Supplier Services (RSS) team within TPRaaS. The role is suited to someone with experience in third-party risk management who wants to contribute to a growing service line at a global firm. You will support clients in improving business performance by helping turn strategy into practical execution, while working with diverse, high-performing teams.

What you will do

• Contribute to third-party risk management engagements, including walkthroughs, testing, documentation, and other delivery tasks.
• Join vendor discussions and client meetings to share progress updates.
• Work in line with policies and procedures that help implement TPRM operating models successfully.
• Support process walkthroughs and help document end-to-end business workflows and functional needs.
• Assist in evaluating how legal and regulatory obligations apply to clients’ TPRM practices.
• Help with technology improvement initiatives such as automation, data analytics, and AI for TPRM processes.
• Identify process gaps and recommend corrective or preventive actions where relevant.
• Stay informed about market movements, competitor activity, EY offerings, and service lines.
• Deliver client work carefully and consistently to meet service expectations.
• Collaborate closely with the team, share ownership, maintain communication, and keep senior colleagues informed on progress.
• Research topics and support senior team members in creating client presentations and information memorandums.
• Take on increasingly complex assignments while aiming to exceed client and team expectations.
• Assist management with proposals and business development documents.
• Use analytical thinking and creative problem-solving to improve service delivery.

Skills and attributes

• Commitment to continuous learning and ongoing self-development.
• Ability to keep upskilling in response to market changes.
• Understanding of workplace policies and procedures, with the discipline to follow them.
• Willingness to take initiative and participate in team and corporate events.

Required background

• A degree in B.Tech (IT/Computer Science), BSc (IT), BE, or MCA from a tier 1 or tier 2 college.
• 1 to 4 years of experience in risk management, preferably across the third-party engagement lifecycle, including pre-contracting, contracting, and post-contracting phases.
• Working knowledge of the TPRM framework, risk management concepts, and information security practices.
• Exposure to contract risk reviews is an advantage.
• Familiarity with TPRM tools and platforms such as ProcessUnity, Prevalent, Archer, and ServiceNow is preferred.
• Basic understanding of standards such as ISO 27001/2, ISO 22301, ISO 27018, PCI-DSS, and HITRUST.
• Basic familiarity with privacy regulations such as GDPR and CCPA.
• Basic awareness of regulations such as FISMA, HIPAA, Reg SCI, and MAS.
• Knowledge of TCP/IP, OSI layer concepts, networking and security basics, Physical & Environmental Security, Asset Security, and Identity & Access Management.
• Relevant certifications such as CISSP, CISA, CISM, CTPRP, CIPP, or ISO 27001 Lead Auditor/Lead Implementer are considered a plus.

Additional information

This role is part of EY’s broader mission to build a better working world by helping clients create value, strengthen trust, and solve complex challenges. The work spans a wide range of industries and gives you the chance to develop through coaching, practical experience, structured progression, and collaboration in a multidisciplinary environment. EY also emphasizes exposure to global TPRaaS practices and opportunities to work with leading businesses across industries.

What EY offers

• Support, coaching, and feedback from experienced colleagues.
• Opportunities to build new skills and advance your career.
• Flexibility to manage your work in a way that suits you.

Company overview

EY focuses on creating new value for clients, people, society, and the planet while helping build trust in capital markets. Through data, AI, and advanced technology, EY teams support clients across assurance, consulting, tax, strategy, and transactions in more than 150 countries and territories.