Policy & Standards Enablement Lead - EY GDS

About the role

EY's Enterprise Technology Risk & Compliance (ETRC) team is looking for a Policy & Standards Enablement Lead to establish and lead its policy and standards governance capability. Reporting to the ET Risk and Compliance Lead, the role aligns ET policies, standards and compliance requirements with enterprise risk management, information security, legal, privacy and regulatory expectations, while driving adoption, awareness and continuous improvement across the technology landscape.

Key responsibilities

• Lead the ET policy and standards governance framework, including policy lifecycle management, review processes and governance reporting.
• Align ET policies and standards with Information Security, Risk Management, Legal, Privacy and Service Quality Management requirements.
• Assess emerging risk, compliance and regulatory requirements and turn them into actionable technology guidance and standards.
• Drive policy awareness, communications, education and adoption programs across ET.
• Advise technology leaders on policy interpretation, standards implementation and compliance obligations.
• Partner with ET Risk & Controls Governance and ET Assurance & Compliance teams to embed policies and standards into control frameworks and compliance activities.
• Support initiatives such as AI-related programs, emerging technology adoption and enterprise transformation.
• Monitor compliance with approved policies and standards, identify gaps and recommend corrective actions and improvements.

Required profile

• Bachelor's degree in Information Technology, Business, Risk Management, Cybersecurity or a related discipline, or equivalent experience.
• Minimum 8-10 years of experience in technology governance, compliance, risk management, information security, audit or policy management.
• Demonstrated experience developing and implementing enterprise policies, standards and governance frameworks.
• Experience working with technology, information security, privacy, legal, risk management and audit stakeholders.
• Proven ability to influence senior leaders and drive outcomes across complex global organizations.
• Experience supporting large-scale technology transformation programs and strategic initiatives.

Required skills

• Strong verbal and written communication skills, able to explain complex governance and compliance concepts.
• Proficiency with Microsoft 365, SharePoint, Power BI and collaboration platforms.
• Experience with AI governance, privacy, cybersecurity or enterprise risk management programs is a plus.
• Certifications such as CRISC, CISA, CISM, CISSP or CGEIT are a plus.