Senior Associate, IT Internal Audit, Risk Consulting

In the new digital economy, technology will play an increasingly important role in every company’s governance framework. As an IT internal audit professional, you’ll be leading engagements to identify technology control enhancements, IT operational and compliance process improvement and efficiency opportunities, as well as company-wide cost improvements. EY is a global leading service provider in this space, with a reputation for high quality and cost-effective innovative offerings.

Our structured career framework means you’ll continue to develop, whatever level you’re at. And with a network stretching around the globe, you’ll gain valuable insight across industries and geographies.

The opportunity

As part of our IT internal audit team, you’ll focus on client opportunities where your expertise can make a substantial impact. You’ll apply your knowledge and experience to shape our services and motivate your team. You’ll build valuable relationships with clients and develop strong capabilities, through both formal training and working with senior mentors and talented colleagues.

Your key responsibilities

As a Senior Consultant within the IT internal audit team, you will provide guidance and share knowledge with team members and participate in performing procedures especially focusing on complex, judgmental and/or specialized issues.

You will work with the team and the client to create plans for accomplishing engagement objectives and a strategy that complies with professional standards and addresses the risks inherent in the engagement.

Skills and attributes for success

• Brief the engagement team on the client's IT environment and industry IT trends
• Maintain relationships with client management and stakeholders to manage expectations of service, including work products, timing and deliverables
• Demonstrate a thorough understanding of complex information systems and apply it to client situations
• Use extensive knowledge of the client's business/industry to identify technological developments and evaluate impacts on the client's business
• Demonstrate excellent project management skills, inspire teamwork and responsibility with engagement team members
• Manage engagement budget, timeline and quality of deliverables
• Write clear, concise and objective audit reports, incorporating key aspects such as engagement objectives, scope, findings, risk implications, root causes and recommendations
• Present and discuss findings and recommendations with client’s management
• Understand EY and its service lines and actively assess what the firm can deliver to serve clients

To qualify for the role, you should have

• A bachelor's degree in Accounting, Business, Information Technology, or a related discipline.
• 3 to 5 years of relevant experience in IT audit, IT risk, cybersecurity, technology risk, or related advisory services.
• At least 2 years of experience as an IT Auditor or IT Risk Consultant within a public accounting firm, professional services firm, or industry environment.
• Willingness to travel, when required.

Technical capabilities in several of the following areas:

• IT General Controls (ITGC) reviews
• Infrastructure and technology controls reviews
• Application controls reviews
• Cybersecurity assessments and reviews
• ERP security and controls reviews (e.g., SAP, Oracle, Workday)
• Cloud security reviews
• Data protection and privacy reviews
• Business process audits supported by data analytics tools such as Power BI, Python, ACL, IDEA, SQL, Spotfire, or Tableau
• Business continuity and resilience reviews
• IT governance and control framework reviews
• IT risk assessments and IT audit planning

Additional qualifications

• Project management and stakeholder management skills.
• Strong written, verbal, and presentation skills.
• Ability to work effectively in teams while building strong client relationships.
• Demonstrated professionalism, integrity, and sound judgment.

Ideally, you'll also have

• Relevant professional certifications such as CPA, CA, CISA, CISSP, CISM, CBCP, CIA, CIPP, CGEIT, or equivalent credentials.