Digital Risk Senior Manager

EY; Ottawa; On-site; CAD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, prescription drug & E

Mental health benefits

Employee Assistance Program

Learning programs

Career development

Volunteer opportunities

Job summary

EY Canada in Ottawa seeks an experienced IT risk auditor to join our Risk Assurance practice. You will lead multi‑client engagements, evaluating IT controls, and guiding teams to deliver high‑quality assurance services.

We expect at least 8 years in IT audit or risk advisory, with expertise in ERP security reviews (Oracle, SAP, PeopleSoft) and SOC engagements. Willingness to travel up to 50% is required; CPA/CISA/CISSP/CISM certifications are preferred or expected within 1 year.

Qualifications

• Bachelor's or Master's degree in accounting, finance, CS, IS, engineering or related field.
• 8+ years IT auditing or IT risk advisory experience in professional services or industry.
• Experience in broader Digital Risk such as cybersecurity, DRA, DevOps, data analytics.
• Engagement experience in at least one of: financial statement audits, internal or operational audits.
• SOX/SOC reporting engagements; ERP security reviews (Oracle, SAP, PeopleSoft).
• Willingness to travel 50%+ and work longer hours when needed; valid passport required.
• CPA/CA or certifications (CISA, CISSP, CISM, etc.) preferred; if not certified, must pursue within 1 year.

Responsibilities

• Manage multiple client engagement teams at an executive level within the practice.
• Analyze, evaluate, and enhance information systems to support internal controls.
• Assist clients and Risk Assurance professionals in IT control and security engagements.

Skills

IT auditing

IT risk assessment

Project management

Client communication

Education

Bachelor's or Master's degree in accounting/IT/related field

Tools

Oracle

SAP

PeopleSoft

Job description

At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

The opportunity

The objective of our risk consulting services is to provide clients with a candid and reliable overview of their risk landscape. Our solutions can be used by our clients to build confidence and trust with their customers, the overall market and when required by regulation or contract.

This job posting relates to an existing vacancy within our organization.

Your Key Responsibilities

You will be responsible for managing multiple client engagement teams at an executive level within the practice and the firm. You can expect to work with high level client personnel to analyze, evaluate, and enhance information systems facilitating the business internal control process, and will assist clients and other Risk Assurance professionals in performing information technology control and security engagements.

Skills And Attributes For Success

• Provide guidance and share knowledge with team members and participate in performing procedures especially focusing on complex, judgmental and/or specialized issues. Work with the team and the client to create plans for accomplishing engagement objectives and a strategy that complies with professional standards and addresses the risks inherent in the engagement
• Brief the engagement team on the client's IT environment and industry IT trends. Maintain relationships with client management to manage expectations of service, including work products, timing, and deliverables. Demonstrate a thorough understanding of complex information systems and apply it to client situations
• Bring and utilize extensive knowledge of the client's business/industry to identify technological developments and evaluate impacts on the client's business. Demonstrate excellent project management skills, inspire teamwork and responsibility with engagement team members, and use current technology/tools to enhance the effectiveness of deliverables and services.
• Understand EY and its service lines and actively assess what the firm can deliver to serve clients.

To qualify for the role you must have

• A bachelor's or master's degree in accounting, finance, computer science, information systems, engineering, or a related discipline
• A minimum of 8 years of experience working as an IT auditor or IT risk adviser for a public accounting firm, a professional services firm, or within industry
• Experience in one of the following for broader Digital Risk such as cybersecurity, business impact assessments, DevOps, data analytics, data mapping and storyboarding.
• Bring your significant experience in applying relevant technical knowledge in at least one of the following engagements: (a) financial statement audits; (b) internal or operational audits; (c)
• Service Organization Controls Reporting engagements; and/or (d) ERP security and control reviews (Oracle, SAP, PeopleSoft)
• We would expect you to be available to travel outside of their assigned office location at least 50% of the time, plus commute within the region (where public transportation often is not available). Successful candidates must work in excess of standard hours when necessary. A valid passport is required.

Ideally, you’ll also

• CPA, CA, CISA, CISSP, CISM, CBCP, CIA, CIPP, or CGEIT certification is desired; If you are non-certified, you are required to become certified within 1 year from your date of hire.

What We Offer You

• comprehensive medical, dental, and prescription drug coverage, as well as mental health benefits, a robust Employee Assistance Program and group savings plans to promote your overall wellbeing
• generous time off, including personal days, vacation days, and additional firm-wide holidays, along with the option to purchase extra vacation days
• Employees can take advantage of EY's exclusive learning programs tailored just for them
• internal opportunities for career development and advancement, enabling you to grow within the firm
• meaningful volunteering through EY Ripples and make a positive impact in the community

Inclusiveness at EY

Inclusiveness is at the heart of who we are and how we work. We’re committed to fostering an environment where differences are valued, policies and practices are equitable, and our people feel a sense of belonging. We embrace diversity and are committed to combating systemic racism, advancing gender equity and women in leadership, advocating for the 2SLGBTQIA+ community, promoting our neuroinclusion and accessibility initiatives, and are dedicated to amplifying the voices of Indigenous peoples (First Nations, Inuit, and Métis) nationally as we strive towards reconciliation. Our diverse experiences, abilities, backgrounds, and perspectives make our people unique and help guide us. Because when people feel free to be their authentic selves at work, they bring their best and are empowered to build a better working world.

Learn about our commitment to Inclusiveness at https://www.ey.com/en_ca/about-us/corporate-responsibility/equity

EY | Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

At EY, we use artificial intelligence (AI) tools as one element of our recruitment process to enhance efficiency and improve the candidate experience. While AI supports us in our process, human judgment and decision-making remain integral in our candidate experience. We are committed to the responsible use of AI, and our practices are continuously reviewed and refined to ensure they align with the highest ethical principles and regulatory requirements.

To all recruitment agencies: EY does not accept unsolicited resumes from recruitment agencies. Any resumes submitted without a prior agreement or request from our hiring team will not be considered. EY is not responsible for any fees related to unsolicited resumes.