Manager - Technology Risk - Assurance - Toronto

EY; Toronto; On-site; CAD 100,000 - 140,000; Full time

Job summary

EY in Toronto is seeking a Manager to join our Technology Risk team. This role will manage engagement teams and assist clients in employing IT controls to maximize efficiency and minimize risk.

You will interact with Assurance and Business Consulting and may touch on cyber security, IT risk assessments, privacy, data analysis and technology implementations. You will lead client engagements, coach junior staff, and build long-term relationships while expanding EY’s technology risk capabilities in

Qualifications

• Bachelor’s degree in Business, IT or related field.
• Minimum of 5 years IT risk or IT audit experience.
• Professional designation (CISA/CPA/CIA/CISSP/CISM) preferred.
• Knowledge of IT controls and audit standards.
• Strong analytical, interpersonal and communication skills.
• Experience with ERP systems (SAP, Oracle) is a plus.

Responsibilities

• Oversee ITGC and ITAC testing to support audits.
• Lead SOX compliance testing and internal audit engagements.
• Coordinate on-site with clients and manage engagement timelines.
• Prepare IT reports with recommendations.
• Develop relationships with client management and stakeholders.
• Support growth of Technology Risk practice.
• Coach junior staff and deliver IT Audit trainings.

Skills

Client management

Communication skills

Teamwork

Presentation skills

Coaching junior staff

Adaptability

Relationship building

Problem solving

Education

Bachelor’s degree

Professional designation (CISA/CPA/CIA/CISSP/CISM)

Tools

Excel

Word

PowerPoint

OneNote

Job description

Manager - Technology Risk - Assurance - Toronto

Location: Toronto

Other locations: Primary Location Only

Date: Oct 20, 2026

Requisition ID: 1754372

At EY, we're all in to shape your future with confidence.

We'll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

The opportunity

EY is seeking a Manager to join our Technology Risk team. This professional will manage engagement teams, as well as directly assist clients in employing information systems, resources, and controls to maximize efficiencies and minimize risk. The successful candidate will also work with client personnel to analyze, evaluate, and enhance information systems facilitating the business internal control process, and will assist clients and other IT professionals in performing information technology (IT) control and security engagements.

This professional will also be expected to interact with other members of the core Assurance and Business Consulting service lines and potentially touch upon topics such as cyber security, IT risk assessments, privacy assessments, technology selections and implementations, data analysis and many other issues our clients deal with.

This job posting relates to an existing vacancy within our organization.

Your key responsibilities

• External audits: Oversee engagements to test and opine on efficacy of IT general controls (ITGCs) and IT application controls (ITACs) to support financial statement audits / integrated audits (Internal Controls for Financial Reporting)
• Internal audits/SOX compliance testing: assist clients in designing and implementing ITGCs and ITACs to support SOX compliance. Assist testing of ITGCs and ITACs to confirm efficacy of controls. Lead internal audit / assessment engagements for clients to help confirm alignment with leading cybersecurity practices (NIST CSF, ISO 27001, etc.)
• Service organization reporting - Focus on the issuance of third-party reports in the form of 3416 reports, SOC 1, SOC 2 reports, etc.
• Provide high-quality professional day-to-day management of internal/external audit engagements/projects and understand EY’s practices and broader service offerings and identify potential opportunities to improve such service offerings
• Lead and support on-site coordination role for clients including planning, briefing team on the client's IT environment and industry IT trends, communicating with the clients and completing audit engagements
• Maintain relationships with client management to manage expectations of service, including work products, timing, and the value to be delivered.
• Prepare IT reports on the adequacy and effectiveness of control structure, along with practical recommendations to improve the effectiveness, efficiency of a control or process.
• Able to discuss and resolve audit issues and recommendations with client management.
• Demonstrate a thorough understanding of complex information systems and apply it to client situations
• Lead and provide relevant support to the teams of senior consultants and consultants, including delivering formal IT Audit related trainings.
• Maintain long-term client relationships and networks as well as cultivate business development opportunities.
• Support the growth and delivery of the Technology Risk practice by identifying client needs, developing technology risk and controls solutions, and collaborating with Assurance and other EY teams on new and evolving reporting requirements.
• Manage engagement quality, economics, timelines, and risks, ensuring deliverables align with EY methodology and client expectations.
• Build trusted relationships with client executives and key stakeholders, providing practical insights on technology risks, control gaps, and remediation priorities.
• Identify and develop new business opportunities by connecting client needs with EY’s broader assurance, technology risk, and consulting capabilities.
• Coach and develop Senior and Staff through effective delegation, timely feedback, technical guidance, and on-the-job learning.
• Contribute to the evolution of the Technology Risk practice through innovation, market-facing initiatives, methodology development, and adoption of data and AI-enabled approaches.

Skills and attributes for success

• Highly professional with ability to work in challenging, diverse and evolving client environments
• Flexible with the ability to learn quickly and leverage skills in new situations
• Excellent verbal and written communication skills
• The ability to build strong client relationships
• Strong team working skills are essential
• Strong presentation and facilitation skills
• A passion to contribute to the growth of the practice
• Strong experience interacting with clients at all levels including Staff, Leadership and Partners Strong written, communication, and presentation skills.
• Ability to coach and mentor junior staff on engagements.

Ideally, you'll also have

• Bachelor’s Degree (or higher) in Business Administration, Commerce, Computer Science, Management Information Systems, or other relevant program required.
• A minimum of 5 years of direct operational IT risk experience or technical knowledge of IT-related assessments or audits (e.g., Internal Controls for Financial Reporting, SOX, SOC reporting)
• Relevant professional designation, such as CISA, CPA, CIA, CISSP, CISM, or eligible to obtain relevant designation
• Comprehensive knowledge of internal auditing standards and techniques;
• Strong analytical, interpersonal and communication skills;
• Demonstrated consistency in values, principles and work ethic;
• Proficiency using MS Office Suite including Excel, Word, OneNote and PowerPoint
• Demonstrated integrity, values, principles, and work ethic
• Big 4 / IT risk consulting experience will be considered an asset
• Demonstrated knowledge of ERP platforms such as SAP, Oracle, etc. would be an asset

What we look for

As an ambassador for the Technology Risk team, you will need to build a strong network internally and be able to exceed our clients' high expectations. We are seeking high-performing individuals who have been recognized for exceeding expectations. We're interested in highly motivated, talented individuals who demonstrate curiosity, a willingness to learn, and a strong ability to think outside the box. You can expect plenty of autonomy in this role, so you'll need the motivation to take initiative, embrace data and AI-enabled ways of working, and seek out opportunities to improve our current relationships and expand our business in the evolving market. If you're ready to take on some of our clients' most complex technology risk and assurance issues, this role is for you.

What we offer you

We offer a competitive compensation package where you'll be rewarded based on your performance and recognized for the value you bring to our business. In addition, our Total Rewards package allows you decide which benefits are right for you and which ones help you create a solid foundation for your future. Our Total Rewards package includes a discretionary bonus program, a comprehensive medical, prescription drug and dental coverage plan, a defined contribution pension plan, a great vacation policy plus firm paid days that allow you to enjoy longer long weekends throughout the year, statutory holidays and paid personal days (based on province of residence), and a range of exciting programs and benefits designed to support your physical, financial and social well-being. Plus, we offer:

• Support and coaching from some of the most engaging colleagues in the industry
• Learning opportunities to develop new skills and progress your career
• The freedom and flexibility to handle your role in a way that's right for you

EY reports salary ranges in accordance with applicable provincial pay transparency legislation. Individual salaries within the anticipated salary ranges noted below are determined through a wide variety of factors including but not limited to internal equity, education, relevant experience, knowledge, and applicable skill sets.

• Toronto: $100,000 to $140,000