EY

Senior Risk and Audit Compliance Engineer - I and O Platform Infrastructure

Senior Risk & Audit Compliance Engineer at EY, Kochi. Lead GRC frameworks using ServiceNow, manage audits (ISO 27001, NIST, SOX, GDPR). 12+ yrs exp, CISA/CISM cert preferred.

ServiceNow Role Type:
Department - JobBoardly X Webflow Template
Implementer
ServiceNow Modules:
Department - JobBoardly X Webflow Template
Governance, Risk, and Compliance
ServiceNow Certifications (nice to have):

Job description

Date - JobBoardly X Webflow Template
Posted on:
 
November 11, 2025

As a Senior Risk and Audit Compliance Engineer within Infrastructure and Operations, Platform Infrastructure, you will serve as a subject matter expert, collaborating with multinational clients on designing, implementing, and enhancing end-to-end risk, compliance, and audit frameworks.

Requirements

  • Bachelor’s or Master’s degree in Information Security, Engineering, Finance, Business, or related fields.
  • 12+ years of progressive experience in risk management, audit, or compliance—minimum 3-6 years in a Big Four or similarly complex consulting or regulated environment.
  • Expertise in regulatory frameworks: ISO 27001, NIST, SOX, PCI DSS, GDPR, COBIT, etc.
  • Proven success in leading end-to-end client audits, regulatory projects, and compliance assessments.
  • Excellent analytical, problem-solving, and communication skills.
  • Experience with GRC, audit, Regulatory Technology (RegTEeh), and data analytics platforms (e.g., Archer, ServiceNow GRC, SAP GRC, Tableau, ACL).
  • One or more relevant certifications: CISA, CISM, CRISC, SoX, ISO 27001 Lead Auditor/Implementer (strongly preferred).
  • Track record managing and developing diverse/high-performing teams.
  • Prior experience in working with the Suppliers/Contractors and driving the Risk and Audit along with yearly Internal and External Audits.

Benefits

  • Competitive salary
  • Opportunities for career growth and development

Requirements Summary

12+ years of experience in risk management, audit, or compliance with expertise in regulatory frameworks and certifications