Technology Risk Staff at EY

About EY and Opportunity

EY is committed to helping shape your future by fostering careers within a globally connected, diverse team environment. Join EY's Technology Risk team as a Staff member, contributing technically to IT Risk and Assurance engagements along with internal initiatives. This role involves strengthening relationships both internally and externally, identifying business opportunities within ongoing projects, and proactively managing risks by escalating concerns when necessary.

Key Responsibilities

• Assess control portfolios for design and operational effectiveness, highlighting issues where relevant.
• Deliver accurate and policy-compliant control assessments on schedule, following established quality standards.
• Conduct and oversee testing of various controls including ITGC, ITAC, system components like architecture and security, cloud services, incident management, ISO27001, NIST assessments, privacy and cyber maturity audits, and software development lifecycle reviews.
• Coordinate with control owners and stakeholders to ensure successful review outcomes and manage escalations effectively.
• Use risk management principles to analyze findings and offer clients valuable insights to improve processes and mitigate risks.
• Examine IT policies and standards to verify compliance with industry norms.
• Lead projects within IT security and governance, risk, and compliance (GRC), fostering collaboration across teams.
• Stay updated and promote awareness of regulatory standards and industry best practices.
• Apply knowledge of control frameworks such as COSO, SOX, and J-SOX, and work with IT frameworks like ISO27001, NIST, PCI-DSS, HIPAA, and others relevant to trust-based auditing standards.

Skills and Attributes for Success

• Guide team members and handle complex issues by collaborating with clients to devise strategies that align with professional standards and risk considerations.
• Experience performing information security assessments including audits of business continuity plans, network security, and IT infrastructure.
• Capability to conduct NIST, ISO, privacy impact, data privacy, GDPR, and third-party risk assessments.
• Maintain proactive client management to set expectations on deliverables, timelines, and outcomes.
• Leverage thorough understanding of client's industry and technology trends to anticipate impacts and inform project management.
• Demonstrate leadership in teamwork and utilizing modern tools for enhanced project delivery.
• Comprehend EY's service lines and identify opportunities to extend client offerings.

Qualifications

Applicants should have a graduate degree in Computer Science, IT, Electronics, Electronics & Telecommunications, MBA, or M.Sc., with 2 to 7 years of relevant experience. Practical expertise should include at least one of these areas: ISO assessments, NIST assessments, data privacy audits, network and infrastructure audits, cyber maturity evaluations, IT policy assessments, IAM, IT asset management, or IT health checks.

Additional desirable skills include a strong grasp of program and project management methodologies and familiarity with typical IT system development life cycles.

Work Culture and Benefits

EY encourages a collaborative team environment valuing commercial insight, technical competence, and a willingness to learn. Employees engage with leading businesses across industries and globally. The firm prioritizes education, coaching, and practical experience for career growth, offering individualized progression plans. Employees receive continuous support, skill development opportunities, and the flexibility to manage their roles effectively.

About EY

EY fosters a better working world by creating value for clients, society, and the planet, building confidence and trust in markets. Utilizing advanced technology, AI, and data, EY delivers multi-disciplinary services including assurance, consulting, tax, strategy, and transactions across more than 150 countries.