IT Audit Senior - Technology Risk
Job description
Technology is central to EY's operations and service delivery. With over 250,000 professionals across more than 140 countries, EY relies on secure, efficient, and innovative technology to support daily work, enable remote collaboration, connect people and clients, and drive organisational innovation.
The opportunity
EY's Technology Risk practice is seeking an IT Audit Senior to be part of client engagement teams, supporting Financial Services clients in assessing, improving, and evaluating their business and IT processes and controls, primarily within IT environments. The role provides exposure across several key focus areas, including:
- IT General Controls and Application Controls
- Data Analytics
- Service Organization Controls (SOC) reporting
- Compliance with regulatory and industry frameworks
- Support to other Advisory sub-services such as Internal Audit, Performance Improvement, and Cyber Security
- Analyse business, financial, and IT systems to identify risks and opportunities for improvement in IT-enabled processes.
- Support the management and delivery of IT Audit and related engagements, including third-party risk management, software asset management, SOC reporting, and privacy solutions.
- Coordinate on-site engagements by planning activities, briefing teams on client IT environments and industry trends, and maintaining client communication.
- Collaborate with engagement teams to develop work plans, risk assessments, timelines, and supporting documentation.
- Ensure high-quality client service by overseeing the daily progress of fieldwork.
- Apply project management skills and leverage technology tools to enhance efficiency and quality of deliverables.
- Build and maintain long-term client relationships and professional networks.
- Identify, discuss, and help resolve audit issues while demonstrating a solid understanding of complex information systems and applications.
Skills and attributes for success
- Strong project management capabilities.
- Excellent analytical, interpersonal, and communication skills.
- Ability to work effectively within a team environment.
- Demonstrated integrity, professionalism, and strong work ethic.
To quality for the role, you must have.
- A bachelor's degree in information systems, finance, business, computer science, engineering, commerce, or a related field.
- Professional certifications completed or in progress (e.g. CISA, CISSP, CISM, CIA), with additional certifications such as CFE, CIPM, or CIPP preferred.
- A minimum of two years' experience in IT operations, IT audit, internal audit, or internal controls.
- Experience with project management, information security, or ERP systems (e.g. SAP) is advantageous.
- Experience in IT Audit or Technology Risk within Banking or Financial Services preferred.
- Willingness to travel.
- ZAQA‑certified academic qualifications.
- Prior Big 4 and OX experience considered an asset.
Ideally, you'll also have
Experience in at least one of the following: financial statement audits; internal audits; operational audits; IT general controls assessments; Service Organization Control reporting engagements; and ERP security and controls reviews (SAP, Oracle or PeopleSoft)
What we look for
As a member of our IT Risk & Assurance team, you will need to build a strong network internally and be able to exceed our clients' high expectations. We are seeking high performing individuals who have been recognised for exceeding expectations.
What we offer
At EY, our Total Rewards package supports our commitment to creating a leading people culture - built on high-performance teaming - where everyone can achieve their potential and contribute to building a better working world for our people, our clients and our communities. It's one of the many reasons we repeatedly win awards for being a great place to work.