Manager- Technology Risk- Assurance

Ernst & Young Advisory Services Sdn Bhd; Barrie; On-site; CAD 70,000 - 110,000; Full time

Job summary

An established industry player is seeking a Manager for their Technology Risk team. This role involves managing engagement teams and assisting clients in optimizing their information systems while minimizing risks. You will oversee audits, enhance internal controls, and provide high-quality management of audit engagements. The ideal candidate will have strong analytical and communication skills, a passion for client relationships, and the ability to mentor junior staff. This opportunity offers a dynamic environment where your contributions can significantly impact clients and the broader business landscape.

Benefits

Comprehensive medical coverage

Dental coverage

Defined contribution pension plan

Flexible vacation policy

Paid personal days

Long weekends throughout the year

Qualifications

• 5+ years of operational IT risk experience or technical knowledge required.
• Proficiency in MS Office Suite and knowledge of ERP platforms is essential.

Responsibilities

• Oversee external audits and test IT general controls for financial audits.
• Assist clients in designing and implementing IT controls for SOX compliance.

Skills

IT risk management

Client relationship building

Analytical skills

Communication skills

Teamwork

Presentation skills

Education

Bachelor’s Degree in Business Administration

Bachelor’s Degree in Computer Science

Relevant professional designation (CISA, CPA, etc.)

Tools

MS Office Suite

ERP platforms (SAP, Oracle)

Job description

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

The opportunity

EY is seeking a Manager to join our Technology Risk team. This professional will manage engagement teams, as well as directly assist clients in employing information systems, resources, and controls to maximize efficiencies and minimize risk. The successful candidate will also work with client personnel to analyze, evaluate, and enhance information systems facilitating the business internal control process, and will assist clients and other IT professionals in performing information technology (IT) control and security engagements.

This professional will also be expected to interact with other members of the core Assurance and Business Consulting service lines and potentially touch upon topics such as cyber security, IT risk assessments, privacy assessments, technology selections and implementations, data analysis and many other issues our clients deal with.

Your key responsibilities

1. External audits: Oversee engagements to test and opine on efficacy of IT general controls (ITGCs) and IT application controls (ITACs) to support financial statement audits / integrated audits (Internal Controls for Financial Reporting).
2. Internal audits/SOX compliance testing: assist clients in designing and implementing ITGCs and ITACs to support SOX compliance. Assist testing of ITGCs and ITACs to confirm efficacy of controls. Lead internal audit / assessment engagements for clients to help confirm alignment with leading cybersecurity practices (NIST CSF, ISO 27001, etc.).
3. Service organization reporting – Focus on the issuance of third-party reports in the form of 3416 reports, SOC 1, SOC 2 reports, etc.
4. Provide high quality professional day-to-day management of internal/external audit engagements/projects and understand EY’s practices and broader service offerings and identify potential opportunities to improve such service offerings.
5. Lead and support on-site coordination role for clients including planning, briefing team on the client's IT environment and industry IT trends, communicating with the clients and completing audit engagements.
6. Maintain relationships with client management to manage expectations of service, including work products, timing, and the value to be delivered.
7. Prepare IT reports on the adequacy and effectiveness of control structure, along with practical recommendations to improve the effectiveness, efficiency of a control or process.
8. Able to discuss and resolve audit issues and recommendations with client management.
9. Demonstrate a thorough understanding of complex information systems and apply it to client situations.
10. Lead and provide relevant support to the teams of senior consultants and consultants, including delivering formal IT Audit related trainings.
11. Maintain long-term client relationships and networks as well as cultivate business development opportunities.

Skills and attributes for success

1. Highly professional with ability to work in challenging, diverse and evolving client environments.
2. Flexible with the ability to learn quickly and leverage skills in new situations.
3. Excellent verbal and written communication skills.
4. The ability to build strong client relationships.
5. Strong team working skills are essential.
6. Strong presentation and facilitation skills.
7. A passion to contribute to the growth of the practice.
8. Strong experience interacting with clients at all levels including Staff, Leadership and Partners.
9. Ability to coach and mentor junior staff on engagements.

To qualify for the role you must have

1. Bachelor’s Degree (or higher) in Business Administration, Commerce, Computer Science, Management Information Systems, or other relevant program required.
2. A minimum of 5 years of direct operational IT risk experience or technical knowledge of IT-related assessments or audits (e.g., Internal Controls for Financial Reporting, SOX, SOC reporting).
3. Relevant professional designation, such as CISA, CPA, CIA, CISSP, CISM, or eligible to obtain relevant designation.
4. Comprehensive knowledge of internal auditing standards and techniques.
5. Strong analytical, interpersonal and communication skills.
6. Demonstrated consistency in values, principles and work ethic.
7. Proficiency using MS Office Suite including Excel, Word, OneNote and PowerPoint.

Ideally, you’ll also have

1. Demonstrated integrity, values, principles, and work ethic.
2. Big 4 / IT risk consulting experience will be considered an asset.
3. Demonstrated knowledge of ERP platforms such as SAP, Oracle, etc. would be an asset.

What we look for

As an ambassador for the Technology Risk team, you will need to build a strong network internally and be able to exceed our clients' high expectations. We are seeking high performing individuals who have been recognised for exceeding expectations. We’re interested in highly motivated talented individuals with a strong willingness to think outside of the box. You can expect plenty of autonomy in this role, so you’ll need the motivation to take initiative and seek out opportunities to improve our current relationships and expand our business in the evolving market. If you’re serious about consulting and ready to take on some of our clients’ most complex issues, this role is for you.

What we offer

At EY, our Total Rewards package supports our commitment to creating a leading people culture - built on high-performance teaming - where everyone can achieve their potential and contribute to building a better working world for our people, our clients and our communities. It's one of the many reasons we repeatedly win awards for being a great place to work.

We offer a competitive compensation package where you’ll be rewarded based on your performance and recognized for the value you bring to our business. In addition, our Total Rewards package allows you decide which benefits are right for you and which ones help you create a solid foundation for your future. Our Total Rewards package includes a comprehensive medical, prescription drug and dental coverage, a defined contribution pension plan, a great vacation policy plus firm paid days that allow you to enjoy longer long weekends throughout the year, statutory holidays and paid personal days (based on province of residence), and a range of exciting programs and benefits designed to support your physical, financial and social well-being.

Diversity and Inclusion at EY

Diversity and inclusiveness are at the heart of who we are and how we work. We’re committed to fostering an environment where differences are valued, policies and practices are equitable, and our people feel a sense of belonging. We embrace diversity and are committed to combating systemic racism, advancing gender equity and women in leadership, advocating for the 2SLGBTQIA+ community, promoting our neuroinclusion and accessibility initiatives, and are dedicated to amplifying the voices of Indigenous peoples (First Nations, Inuit, and Métis) nationally as we strive towards reconciliation. Our diverse experiences, abilities, backgrounds, and perspectives make our people unique and help guide us. Because when people feel free to be their authentic selves at work, they bring their best and are empowered to build a better working world.

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.