At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.
AI Risk and Governance Technical Expert – Workstream Lead Support
The opportunity
This is an exciting opportunity to join the GDS Risk Management Services (RMS) Innovation Risk function in Gurgaon, India as an Assistant Director/ Manager providing technical expertise and delivery support across AI Risk and Governance workstreams.
Working closely with the workstream lead, you will help translate Responsible AI principles, regulatory expectations and control requirements into practical technical and governance measures. You will provide technical input into the assessment of AI systems and use cases, identify risks and control gaps, review relevant technical evidence, and support the development of proportionate and implementable risk mitigation measures.
The role will support the responsible development, deployment, use and monitoring of AI systems, including generative AI and machine learning solutions. You will work collaboratively with technology, business, risk, legal, data protection, information security, procurement and quality stakeholders.
Your responsibilities
- Support the workstream lead in planning and delivering assigned AI Risk and Governance workstreams, while maintaining clear visibility of milestones, dependencies, risks and upcoming decisions.
- Coordinate cross-functional reviews involving Global Risk Management, Service Lines, EY Technology, Global Functions, Regions and enabling teams such as Legal/GCO, Data Protection, Information Security, Procurement/Supply Chain and Quality.
- Prepare, review and maintain workstream drafts, guidance, control requirements, templates, action trackers, decision logs and other governance artefacts for review and approval.
- Assist in developing practical implementation plans for new or updated AI guidance and controls, and support communication and adoption across service lines, functions and geographies.
- Support activities across the AI governance lifecycle, including intake, risk assessment, QRM review, validation, release or go-live conditions, evidence readiness and post-deployment monitoring.
- Prepare materials for AI governance forums and leadership reporting, including status updates, decision papers, metrics, risk summaries, meeting notes and follow-up trackers.
- Perform or support risk-based technical assessments of AI systems and tools that are built, bought, deployed or used by EY, evaluating their alignment with Responsible AI principles and relevant data protection, information security, AI security, third-party risk, technology risk and quality requirements.
- Identify and assess technical risks such as inaccurate or unreliable outputs, bias, lack of explainability, data leakage, prompt injection, insecure integrations, insufficient human oversight and model or performance drift.
- Review whether proposed technical and procedural controls are appropriately designed to manage identified risks across the AI lifecycle, including testing, approval, deployment, monitoring, change management and incident management.
- Work with technology owners, developers, architects, data professionals and risk SMEs to translate technical findings into clear risk statements, proportionate control requirements and practical remediation actions.
- Conduct research on emerging regulatory expectations, market developments and Responsible AI practices, and summarize potential implications for workstream activities and stakeholder guidance.
- Support in developing and maintaining enablement materials such as playbooks, checklists, FAQs and templates to help teams apply governance requirements.
Technical Skills
- Working knowledge of AI risk, Responsible AI principles, AI governance processes and the AI system lifecycle.
- Understanding of data protection, information security, third-party AI risk, evidence management, issue tracking and governance reporting.
- Familiarity with AI risk assessments, control frameworks, system or model documentation, evidence packs and audit-readiness expectations.
- Exposure to AI regulatory expectations, including the EU AI Act or similar governance frameworks.
- Strong understanding of AI and machine learning concepts, including generative AI, large language models, foundation models, retrieval-augmented generation and the end-to-end AI system lifecycle.
- Ability to understand and critically review AI solution architecture, data flows, system integrations, model or system documentation, evaluation results, technical limitations and control design.
- Knowledge of key AI risks, including bias and fairness, explainability, inaccurate or unreliable outputs, robustness, privacy, data leakage, prompt injection, adversarial threats, performance drift and human overreliance.
- Practical experience conducting or supporting AI, technology, data, information security, model or algorithmic risk assessments.
- Understanding of AI testing and evaluation approaches, including performance assessment, robustness testing, bias and fairness evaluation, security testing, red teaming and post-deployment monitoring.
- Familiarity with AI regulatory and governance frameworks, including the EU AI Act, NIST AI Risk Management Framework, ISO/IEC 42001 or comparable frameworks.
- Understanding of data protection, information security, third-party technology risk, secure development, evidence management, issue management and audit-readiness expectations.
- Ability to translate technical findings into clear risk statements, control requirements, remediation recommendations and concise leadership reporting.
- Familiarity with technical or analytical tools such as Python, SQL, Power BI, Azure AI services, source-code repositories or AI testing and monitoring tools would be advantageous.
- Strong drafting and documentation capability, including preparation of guidance, templates, decision notes, status updates, metrics and review observations.
- Proficient in using digital tools such as generative AI platforms, Microsoft Excel and PowerPoint for research, analysis, reporting and presentations.
Business Skills
- Strong analytical and problem-solving skills, with the ability to identify gaps, clarify requirements, assess implications and propose practical next steps.
- Ability to manage multiple activities, deadlines and provide timely progress updates to the leadership and stakeholders.
- Effective stakeholder management and relationship-building skills, with the confidence to work with business owners, technology owners and risk or compliance subject-matter professionals.
- Clear written and verbal communication skills, with the ability to present complex topics in a concise, practical and audience-appropriate manner.
- Ability to work through ambiguity, respond to evolving requirements and exercise sound judgment while seeking guidance on material or sensitive matters.
- Collaborative and service-oriented approach, with attention to detail, accountability and action closure.
To qualify for the role, you must have
- Post Graduate degree or equivalent professional qualification in risk management, governance, compliance, technology, computer science, artificial intelligence, machine learning, data science, information systems, engineering, cybersecurity, technology risk or a related discipline.
- Approx. 10 years of relevant experience in risk management, governance, compliance, technology risk, Responsible AI, or related areas.
- Demonstrable experience reviewing or assessing AI-enabled systems, technology solutions, solution architecture, data flows, technical controls or model-related documentation.
- Experience working with Risk Management, technical SMEs and cross-geography stakeholders.
- Working in a Risk Management domain is an advantage.
- Project/program management, risk, compliance or legal certifications are a plus.
- Strong drafting, research, communication and Microsoft Office skills.
- Relevant certifications in AI, cloud, cybersecurity, privacy, technology risk, audit or project management will be an added advantage.
- Experience applying AI regulations, governance frameworks or technical standards in an enterprise environment.
What we look for
- Someone who wants to grow into a AI and Risk governance role at EY and develop future-focused skills in AI regulation and responsible innovation.
- A professional who can combine regulatory judgment with practical, adoptable guidance and collaborative stakeholder engagement.
- A passion to learn and contribute to the responsible and ethical procurement, development, deployment and use of AI and emerging technologies across EY.
What we offer
EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across six locations - Argentina, China, India, the Philippines, Poland and the UK - and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. We'll introduce you to an ever-expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.
- Continuous learning: You'll develop the mindset and skills to navigate whatever comes next.
- Success as defined by you: We'll provide the tools and flexibility, so you can make a meaningful impact, your way.
- Transformative leadership: We'll give you the insights, coaching and confidence to be the leader the world needs.
- Diverse and inclusive culture: You'll be embraced for who you are and empowered to use your voice to help others find theirs.
EY | Building a better working world
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.
Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.
Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.