Risk Specialist

Job Description

Role & responsibilities As a Digital & Analytics (DnA) Risk Specialist located in Asia, you will be an integral part of our Client Service Risk (CSR) team. This team plays a crucial role in advising firm leadership on managing risks throughout the client engagement lifecycle, including client selection, work scope management, and adapting to operational changes. The mission of CSR is to facilitate client impact and innovation while effectively managing risks to our clients, our people, and the firm. Our globally integrated team comprises professionals from diverse backgrounds such as communications, consulting, government, and law. In this role, you will provide guidance to McKinsey's Partners on optimizing client service and thought leadership while mitigating associated risks. You will advise Partners on managing potential risks in client engagements across Asia, in alignment with firm policies. Your responsibilities will include developing briefing materials and coordinating discussions for the Client Service Risk Committee, a global body of firm leaders that advises on complex, high-risk engagements. You will lead risk assessments across Asian offices, focusing on key risks and developing mitigation strategies, particularly in technology areas such as IT modernization, Agile, cloud, cybersecurity, generative AI (gen AI), and digital transformation. To achieve this, you will collaborate closely with various firm functions (including Communications, Finance, and Legal) and 'cells' (practices, offices, new delivery models) to address multifaceted issues. Additionally, you will contribute to raising awareness of risk policies and compliance processes, manage incidents, respond to crises, and conduct "after action" assessments. You will also engage in global initiatives, such as policy reviews, as part of our global Risk function. You will report to the Associate Director of Client Service Risk, (DnA), Asia. Preferred candidate profile Technical or consulting experience in Digital & Analytics (DnA) or Technology risk management. Graduate degree, as well as demonstrable intellectual curiosity through professional training, advanced degree, or professional impact. 4+ years of professional experience in technology risk management with relevant knowledge on the topics of Digital, AI, gen AI, Cyber, Enterprise risk, Security frameworks and regulations. Familiarity with large technology delivery, agile methodology, digital transformations, AI/gen AI deployments and business building. Professional certifications such as Certified Information Systems Auditor (CISA), ISO ISMS Certifications, Certified Information Systems Security Professional (CISSP) or Certified Information Privacy Technologist (CIPT) are highly desirable. Excellent analytical, problem-solving skills; proven ability to juggle complex, sensitive, time-critical issues and quickly get up to speed on unfamiliar topics. Excellent judgment, exceptional integrity, and distinctive interpersonal and collaborative skills. Excellent organizational capabilities, including the ability to initiate tasks independently and see them through to completion. Ability to work across all levels of seniority, cultivating trust-based, peer-counselor relationships and quickly establishing credibility. Strong communication skills, both verbal and written, in English and local office language(s), with the ability to adjust your style to suit different perspectives and seniority levels. Proficient in rational decision making based on data, facts, and logical reasoning. Ability to create work product-focused materials/outputs, which may include PowerPoint decks, Excel models, articles, or other written deliverables. Exceptional time management to meet your responsibilities in a complex and largely autonomous work environment. Ability to work or attend meetings outside of traditional business hours or take on projects with limited or no notice at times. Experience working on projects involving data processing, cloud computing and software development/delivery.