Technology Risk Manager, Assurance - Malawi

Technology Risk Manager, Assurance – Malawi

At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.​

Our Technology Risk Assurance team supports clients by providing independent, risk-based assurance services, including IT General Controls reviews, internal technology audits, technology risk assessments, governance reviews and control assurance over complex technology environments, including on-premises, cloud and hybrid systems.

The opportunity

As a Manager, you will lead multiple client engagement teams from planning through to reporting, with responsibility for quality delivery, stakeholder engagement, team supervision and practical risk-based recommendations. Engagements may include internal IT audit, ITGC assessments, IT governance reviews, IT risk and compliance reviews, financial statement audit support, security and controls reviews and data analytics-enabled audit procedures.

You will work closely with clients to understand their technology environments, assess key risks, evaluate control design and operating effectiveness, and present clear, well-supported findings to senior stakeholders.

Your key responsibilities

• Lead and manage internal IT audit and technology assurance engagements end-to-end, including planning, execution, review and reporting.
• Oversee ITGC assessments across user access management, change management, IT operations, backups, job monitoring, incident management and related control areas.
• Evaluate IT governance, risk management and control frameworks, including alignment to relevant standards and frameworks.
• Assess control design and operating effectiveness across complex IT environments, including on-premises, cloud and hybrid systems.
• Review audit workpapers, findings, risk ratings and reports to ensure accuracy, completeness, quality and alignment with EY methodology and professional standards.
• Present audit findings, risks and practical remediation recommendations to senior client stakeholders in a clear, credible and business-focused manner.
• Manage client relationships, expectations, deliverables, timelines and engagement budgets across multiple assignments.
• Coach, review and develop junior team members and Seniors, while fostering a collaborative, high-performance and quality-focused team environment.
• Contribute to practice development through proposals, internal initiatives, knowledge sharing, methodology improvements and identifying opportunities to connect clients with relevant EY services.

Skills and attributes for success

• Strong audit mindset, professional scepticism, attention to detail and commitment to quality.
• Ability to assess technology risk, understand complex IT environments and translate technical issues into business-relevant insights.
• Strong leadership, coaching and team management capability, with the confidence to guide engagement teams and review technical deliverables.
• Excellent stakeholder engagement, written and verbal communication skills, including the ability to present findings to senior management.
• Strong project management skills, with the ability to manage multiple engagements, competing priorities and tight deadlines.
• Business awareness, curiosity, resilience and a growth mindset, with the drive to contribute to a growing Technology Assurance practice.

Qualifications and requirements

• Bachelor’s degree in Information Systems, Accounting or a related field.
• CISA certification is a key requirement for this role.
• CISSP certification will be an added advantage.
• At least 5 years’ relevant experience in technology audit, risk, assurance, consulting or a related industry role, preferably within professional services or a regulated environment.
• Strong experience in ITGCs, including access management, change management, IT operations, incident management, backups and job monitoring.
• Experience managing audit engagements, reviewing deliverables and supervising teams.
• Knowledge of IT governance, IT service management, and technology risk and control frameworks relevant to assurance engagements.
• Exposure to ERP security and controls reviews, data analytics in audit, cloud control assurance or regulated industries, especially financial services, will be advantageous.
• Ability to build trusted client relationships, manage a portfolio of engagements and identify opportunities to expand value for clients.

What we offer

At EY, you will develop future-focused skills, gain exposure to diverse clients and industries, work with leading audit methodology and digital tools, and build a meaningful career within a globally connected professional services network. This is an opportunity to deepen your expertise in technology assurance, risk and governance while leading teams, influencing clients and contributing to our Technology Assurance capability.

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.