MS - FDL-Manager - AI Architect

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. 

Job Title: Manager – Platform Governance

Summary:

We are looking for a skilled and experienced Manager – Platform Governance to manage the governance processes, controls, and compliance oversight for enterprise platforms supporting data products and corporate finance transformation.

This role combines platform governance, risk coordination, and team leadership to promote secure, reliable, and well-controlled platform services. The ideal candidate will work with platform engineering, operations, security, architecture, and business teams to embed practical governance across services supporting P2P, O2C, R2R, and FP&A.

You will be accountable for coordinating governance reviews, maintaining control and exception records, monitoring adherence to approved standards, and supporting audit readiness within the assigned platform scope. You will enable delivery teams to meet governance requirements while escalating unresolved risks to accountable decision-makers.

Responsibilities:

Platform Governance & Control Oversight

• Maintain the platform governance framework, control inventory, ownership matrix, and review calendar in alignment with enterprise policies and approved architecture and security standards.
• Translate approved policies into practical control requirements, review checklists, and evidence expectations for platform provisioning, operation, change, and retirement.
• Coordinate governance reviews for new platform services and significant changes, tracking required approvals, control gaps, and actions before release or onboarding.
• Maintain platform and service inventories with accountable owners, criticality classifications, dependencies, and lifecycle status; coordinate periodic validation with service teams.
• Coordinate periodic access reviews with identity and service owners, covering privileged access, least privilege, segregation of duties, and timely removal of inappropriate access.
• Administer policy exceptions and risk registers, documenting rationale, compensating controls, accountable owners, expiry dates, and approvals by designated authorities.

Risk, Compliance & Audit Readiness

• Plan risk-based governance and control review activities, prioritizing critical platforms, overdue findings, and material changes in consultation with security and risk teams.
• Coordinate control self-assessments and evidence collection; verify evidence completeness and traceability while supporting independent assurance and audit teams.
• Track and report control coverage, review completion, overdue remediation, expired exceptions, and repeat findings; escalate material issues through agreed governance forums.
• Coordinate remediation plans with control owners, monitor milestones, and obtain supporting evidence before recommending closure to authorized reviewers.
• Partner with security, privacy, legal, and data governance teams to map applicable obligations to platform controls, including logging, retention, data protection, and third-party service requirements.

Team Leadership & Talent Management

• Manage a team of governance analysts or coordinators, allocating review, reporting, and evidence-management responsibilities across supported platforms.
• Build a culture of accountability, constructive challenge, consistent documentation, and collaboration with engineering and operational teams.
• Manage capacity planning, onboarding, performance feedback, and training; develop backup coverage for recurring governance and audit activities.
• Coach team members on control assessment, evidence quality, risk documentation, issue tracking, and clear stakeholder communication.

Business & Stakeholder Management

• Partner with finance stakeholders and platform owners to understand business criticality, reporting dependencies, and control requirements for supported services.
• Coordinate with architecture, engineering, operations, security, and risk teams to clarify control ownership and resolve governance gaps without duplicating responsibilities.
• Facilitate governance forums, prepare decision papers, record decisions and approvals, and track agreed actions to completion.
• Communicate governance status, emerging risks, exceptions, audit readiness, and remediation progress clearly to management and business stakeholders.

Governance Enablement & Continuous Improvement

• Standardize reusable control checklists, evidence templates, onboarding criteria, and exception workflows to improve consistency and reduce administrative effort.
• Work with engineering teams to automate control monitoring and evidence collection where feasible, including policy-as-code checks and governance dashboards.
• Review lessons from incidents, audits, and control failures; recommend framework improvements and track evidence of resilience testing, lifecycle reviews, and secure service retirement.

Qualifications

Education & Experience

• Bachelor’s degree in Information Technology, Computer Science, Engineering, Information Systems, or a related field, or equivalent practical experience.
• 7+ years of experience in technology governance, platform operations, IT risk, compliance, or technology controls, including responsibility for enterprise platform governance activities.
• 2+ years of team leadership or people-management experience, with a track record of coordinating cross-functional control reviews and developing governance or operations teams.

Technical Expertise

• Working knowledge of at least one major cloud platform (Azure, AWS, or GCP) and its governance capabilities, including resource organization, policy enforcement, identity, and audit logging.
• Understanding of enterprise platform services, cloud infrastructure, data platforms, and service lifecycle management sufficient to assess control coverage and engage technical owners.
• Experience with control inventories, risk and exception registers, evidence repositories, and GRC or IT service management tools.
• Working knowledge of CI/CD, infrastructure as code, configuration management, and policy-as-code concepts to support governance integrated into engineering workflows.
• Understanding of access governance, segregation of duties, data classification, encryption, logging, retention, vulnerability management, and third-party technology risk.

Governance & Delivery Skills

• Proven ability to coordinate risk-based control reviews, audit preparation, issue remediation, and governance reporting across multiple stakeholder groups.
• Familiarity with relevant frameworks such as COBIT, ITIL, ISO/IEC 27001, or NIST; ability to apply requirements proportionately to platform scope and business risk.
• Strong planning, documentation, analytical, and follow-through skills, including the ability to interpret control metrics and distinguish evidence gaps from confirmed control failures.

Domain & Functional Knowledge<