Technology Risk Manager - AI Advisory & Assurance

• At EY, we’re all in to shape your future with confidence.
• We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.
• Join EY and help to build a better working world.

The opportunity

We are looking for a highly motivated Technology Risk Manager -AI Advisory & Assurance to join our dynamic IT Audit team.

As a member of the Technology Risk team, you will lead assurance and advisory in assurance engagements focusing on AI for clients in Luxembourg and abroad. You will help organizations design, govern, secure and build trust in their AI solutions — from AI strategy, governance and risk management frameworks to the assessment of AI models, AI-enabled processes and agentic AI systems. Building on this advisory expertise, you will play a key role in originating and growing our AI-related assurance services, such as AI governance and controls attestation (e.g.

ISAE 3000 reports), ISO/IEC 42001 readiness and EU AI Act compliance assessments. You will also support integrated audit teams where AI and data analytics affect financial reporting.

This role offers you the unique opportunity to shape a fast-growing service line at the intersection of AI innovation and trust, with quick onward career progression while working with a broad range of clients across a number of sectors.

Your key responsibilities

We help our clients adopt AI responsibly and with confidence. As a Manager in the Technology Risk team, you will be the go-to advisor on AI governance, risk and controls, and you will turn advisory insights into assurance opportunities. Your key responsibilities will include:

Lead AI advisory engagements, including AI strategy and use-case assessments, AI governance and operating model design, AI risk management frameworks, AI inventory and risk classification, and responsible AI policies and controls.

Assess AI systems and products across their lifecycle (data sourcing, model development, validation, deployment and monitoring), including generative AI and agentic AI solutions, and recommend pragmatic controls over model risk, data quality, security, privacy, bias and explainability.

Advise clients on compliance with regulations and standards, such as the EU AI Act, GDPR, DORA, NIS2, ISO/IEC 42001, ISO/IEC 23894 and the NIST AI Risk Management Framework.

Identify, shape and convert advisory relationships into assurance opportunities, such as AI governance and controls attestation (ISAE 3000, ISAE 3402/SOC where AI supports outsourced services), ISO/IEC 42001 readiness and pre-certification reviews, and independent AI model and algorithm reviews.

Actively drive market, sales and business development activities: develop service propositions, prepare proposals and pricing, lead client presentations and workshops, and contribute to thought leadership and market events.

Collaborate with financial audit, data & analytics and EY AI specialists to support integrated audits where AI affects financial reporting, and to embed AI-enabled tools into our own service delivery.

Manage engagement economics, quality and risk management, including independence considerations when moving from advisory to assurance services with the same client.

Lead, coach and develop teams of Technology Risk professionals and help build AI capabilities across the team.

You will be managing multidisciplinary teams to deliver quality services to our clients, and your success will be measured not only by delivery excellence but also by your contribution to growing our AI advisory and assurance portfolio. As part of our team you will be expected to take on responsibility early, while continuously developing your personal skills through learning, experiences and coaching.

Your profile

You hold a Master’s degree or equivalent certification in Computer Science, Data Science, Artificial Intelligence, Information Systems, engineering or other appropriate academic majors.

You have a minimum of

5 years of relevant experience in technology risk, IT audit, data/AI advisory or consulting, including at least 1 year focused on AI governance, AI risk management or AI solution delivery

At least 1 year of hands-on experience working with and developing AI products and solutions (e.g. machine learning models, generative AI / LLM-based applications, AI agents), covering the AI lifecycle from use-case definition and data preparation to deployment and monitoring

3 years of experience in a supervisory/managerial capacity, leading teams and client engagements, including responsibility for engagement quality and risk management.

You have sound knowledge of and experience in governance and risk management frameworks and standards, such as ISO/IEC 42001, ISO/IEC 23894, NIST AI RMF and the OECD AI Principles, as well as common IT frameworks such as COBIT, ITIL and ISO27k.

You have a solid understanding of the EU AI Act and related regulations (GDPR, DORA, NIS2) and their practical implications for clients, particularly in the financial services sector.

You hold, or are willing to obtain within 1 year from the date of hire, at least one recognized AI certification, such as ISACA AAIA (Advanced in AI Audit), ISACA AAISM (Advanced in AI Security Management), IAPP AIGP (Artificial Intelligence Governance Professional) or ISO/IEC 42001 Lead Auditor/Lead Implementer.

You have a proven track record in business development: identifying opportunities, building trusted relationships with senior client stakeholders, and contributing to proposals that convert into advisory and assurance engagements.

You can explain complex AI concepts and risks in a clear, business-oriented way to executives, boards and non-technical stakeholders.

You are fluent in English; additional language skills will be considered as an asset.

You are highly organized and flexible, with the ability to learn quickly and leverage skills in new situations.

You can anticipate problems and take decisive action, giving regard to the impact on both the client and the company.

You strive to obtain and share knowledge, ideas and solutions to improve client's business and processes.

It is welcome for you to have

Additional relevant certifications, such as CISA, CISM, CRISC, CGEIT, CISSP, CIA, ISO 27001 Lead Auditor/Implementer or PMP, as well as technical AI and cloud certifications (e.g. Microsoft Certified: Azure AI Engineer Associate, AWS Certified Machine Learning Engineer – Associate, Google Cloud Professional Machine Learning Engineer), are considered an advantage.

Significant experience in at least one of the following: (a) AI assurance, algorithm audits or model risk management/validation; (b) development or implementation of AI/ML or generative AI products; (c) governance programme implementation; (d) attestation engagements (ISAE 3000, ISAE 3402/SOC); and/or (e) IT audit or financial statement audit support.

Experience with data science and AI tooling (e.g. Python, SQL, Azure OpenAI / Azure Machine Learning, AWS SageMaker / Bedrock, Databricks, MLOps platforms) and with AI-enabled audit or analytics tools.

Prior experience in project planning and management will be a plus.

Knowledge of basic principles of Accounting and Financial Reporting.

Knowledge of business and accounting information systems (Accounting, Billing, Payroll, ERP systems such as SAP, Navision, etc.).

Knowledge of IT and cloud architecture, data platforms and AI-specific security risks (e.g. prompt injection, data leakage, model poisoning).

Knowledge of statistics, machine learning techniques, model evaluation and data analytics tools.

What we offer you

At EY, we’ll develop you with future-focused skills and equip you with world-class experiences. We’ll empower you in a flexible environment and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more.

Are you ready to shape your future with confidence? Apply today.

To help create the best experience during the recruitment process, please describe any disability-related adjustments or accommodations you may need.

EY | Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

Our offer of employment is contingent upon the successful completion of a background check and pre-screening requirements. The candidate acknowledges that all information provided must be accurate.