Risk Consulting-Senior-IT-InfoSec Auditor

EY-Digital Risk - IT-InfoSec Auditor

At EY, we’re all in to shape your future with confidence. 

Join EY and help to build a better working world.

As part of our Risk Consulting, you will be joining the Digital Risk Consulting Team.

As part of our Digital Risk team, you will be part of Audit team to perform Information Security assessments, IT Infrastructure, and IT Application control audit for various clients across the MENA region. Working with Digital Risk team, you will also perform IT/IS Risk assessment, IT/IS Governance, ERP reviews and conduct maturity assessment on the client’s current IT/IS posture. The client base spans across various sectors and includes collaboration with other teams within Advisory services.

The opportunity

We’re looking for Senior with expertise in IT/IS Audit. This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the growth of our service offering.

Your key responsibilities

• Responsible for working with multiple client engagements and teams at a Senior level within the MENA region.
• You can expect to work with high level client personnel to address compliance, financial, and operational risks
• You are also expected to perform IT/InfoSec internal control testing, develop IT/InfoSec internal audit plans, and provide IT/InfoSec internal audit services for the MENA stakeholders. 
•  You will assess the client’s current state IT/InfoSec internal controls for the client's IT/InfoSec environment and identify IT/InfoSec risks and subsequent recommendations.
• Working with client personnel to analyse, evaluate and enhance information systems facilitating the business internal control process, and assisting clients and other technology professionals in performing information technology control audits, information technology control engagements, security audits and security engagements

Skills and attributes for success

• Collaborating with other members of the engagement team to plan the engagement and develop work program timelines, risk assessments and other documents/templates.
• Able to manage Senior stakeholders in the IT/InfoSec internal audit domain.
• Experience in leading teams to execute IT/InfoSec audit/Risk Management within stipulated timeline along with high quality deliverables.
• Lead and execute IT/InfoSec internal audit engagements.
• Exposure to ITGC testing, IS audits SOC2 audits, ISMS and COBIT reviews
• Experience in performing IT reviews in FS sector is preferred.
• Good Communication skill and willingness to travel at a short notice
• Experience in applying relevant technical knowledge in at least one of the following engagements:

1. • Information Security audits and reviews.
   • IT internal or operational audits and reviews
   • IT General Controls audits and reviews
   • ERP security and control reviews (Oracle, SAP, MS Dynamics)

• Demonstrating and applying strong project management skills, inspiring teamwork, and responsibility with engagement team members

To qualify for the role, you must have

• A bachelor's or master's degree
• A minimum of 4-10 years of relevant years of experience working as Information security professional with IT/IS internal audit background in a professional services firm.
• Excellent communication skills with consulting experience preferred
• A valid passport for travel.

Ideally, you’ll also have

• • A bachelor's or master's degree in B. TECH/B. E, MS, MBA in accounting or a related discipline.
• • ISO27001, ITSM, CoBIT, ITIL V3, CISA, CISM, CIA (anyone certification is desired)

What working at EY offers

At EY, we’re dedicated to helping our clients, from start–ups to Fortune 500 companies — and the work we do with them is as varied as they are.

You get to work with inspiring and meaningful projects. Our focus is education and coaching alongside practical experience to ensure your personal development. We value our employees and you will be able to control your own development with an individual progression plan. You will quickly grow into a responsible role with challenging and stimulating assignments. Moreover, you will be part of an interdisciplinary environment that emphasizes high quality and knowledge exchange. Plus, we offer:

• Support, coaching and feedback from some of the most engaging colleagues around
• Opportunities to develop new skills and progress your career
• The freedom and flexibility to handle your role in a way that’s right for you