ITGC - Internal Auditor

Job description

At EY, youll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

EY- Technology Risk – Senior

As an IT risk professional, you’ll contribute technically to risk assurance client engagements and internal projects. An important part of your role will be to perform IT audits, document good quality assessment reports and issue opinions. You’ll anticipate and identify risks within engagements and share any issues with the audit stakeholders. You’ll also identify potential business opportunities for EY within existing engagements and facilitate integration as appropriate. In line with EY’s commitment to quality, as an influential member of the team - you’ll help to create a positive learning culture, coach and counsel junior team members and help them to develop.

The opportunity

We’re looking for experienced staffs with 1 to 3 years of hands-on experience in IT Risk/Audit, Assurance and Advisory to join our Technology Risk Team. This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the growth of a new service offering.

Your key responsibilities

• Participate, lead and execute the IT Risk and Assurance engagements
• Develop and maintain productive working relationships with client and onshore stakeholders
• Work effectively as a team member, sharing responsibility, providing support, maintaining communication and updating senior team members on progress
• Help prepare reports and schedules that will be delivered to clients and other parties
• Develop and maintain productive working relationships with client personnel
• Build strong internal relationships within Ernst & Young Services and with other services across the organization
• Stay current with and promote awareness of applicable regulatory standards, upstream risks and industry best practices across the enterprise.

Skills and attributes for success

Work effectively as a team player - collaborate and share responsibility, coach, and support team members to succeed

Role & responsibilities

To qualify for the role, you must have

• B.E/B.Tech (CS/ IT, Electronics, Electronics & Telecommunications,)/MBA/M.Sc., Chartered Accountant and/or MBA with Finance/IT with at least 1-3 years of experience
• 1-3 years of professional experience in the areas of IT audits, ITGC, SOX / ICFR / IFC / SAS 70 / SSAE / SOC1, SOC2, IT Financial Audit and Business Automated Controls, IT Risk consulting or any other regulatory / compliance audits
• Expertise in pre and post implementation reviews and auditing configuration of major ERPs like SAP, Oracle, JDE, WorkDay, Netsuite, Navision etc.
• Expertise in performing infrastructure reviews pertaining to OS, DB and Active Directory such as Windows, UNIX, SQL, Mainframe, Oracle etc.
• Assist with the development of policies, procedures and standards that meet existing and newly developed policy and regulatory requirements
• Assist with facilitating IT security/risk training curriculum.
• Work closely with cross-functional teams and develop strong relationships as project lead within IT security and GRC projects.
• Stay current with and promote awareness of applicable regulatory standards, upstream risks and industry best practices across the enterprise
• Must have end-client facing experience.

Ideally, youll also have

• CISA, CISM, CRISC, ISO27001, Cloud and Data privacy certifications
• IT audit knowledge for a financial audit - Control frameworks such as COSO, related regulations including SOX and J-SOX
• Data analytics/automation tool – SQL, Monarch, BluePrism, Alteryx, PowerBI
• Familiarity with a typical IT systems development life cycle