Analyst - Assurance - AMI - ASU - TR - Technology Risk - Mumbai

Ernst & Young Advisory Services Sdn Bhd; Mumbai; On-site; INR 800,000 - 1,200,000; Full time

Job summary

Ernst & Young Advisory Services Sdn Bhd is seeking an Analyst - AMI - ASU - TR - Technology Risk in Mumbai. The role focuses on conducting IT audits, assessing ITGCs/ITACs, and ensuring SOX compliance with SOCR and process reviews.

The ideal candidate has IT risk knowledge, certifications like CISA/CISSP preferred, and the ability to communicate findings across teams in a fast-paced environment.

Qualifications

• Fresher or experienced in IT risk and assurance environments.
• Knowledge of IT control frameworks and regulatory requirements (ICFR).
• Ability to communicate audit outcomes to stakeholders and work in a multi-priority environment.

Responsibilities

• Conduct detailed IT audits to ensure controls and regulatory compliance.
• Identify ITGCs and ITACs; perform SOX testing and remediation.
• Prepare SOCR and assess IT processes; evaluate Change, Access, and Application Controls.
• Collaborate with teams, address control gaps, and communicate findings to management.

Skills

IT Audits

ITGCs

ITACs

SOX Compliance

SOCR

Change Management

Access Management

Application Controls

SOD

IT controls

CISA

CISSP

Education

Bachelor of Technology in Computer Science

Bachelor of Commerce

Bachelor of Computer Applications

Master of Commerce

Master of Business Administration

Master of Computer Applications

Bachelor of Technology in Mechanical Engineering

Bachelor of Engineering in Electrical

Job description

Analyst - Assurance - AMI - ASU - TR - Technology Risk - Mumbai

Other locations: Primary Location Only

Date: Sep 1, 2026

As a global leader in assurance, tax, transaction and advisory services, we hire and develop the most passionate people in their field to help build a better working world. This starts with a culture that believes in giving you the training, opportunities and creative freedom. At EY, we don't just focus on who you are now, but who you can become. We believe that it’s your career and ‘It’s yours to build’ which means potential here is limitless and we'll provide you with motivating and fulfilling experiences throughout your career to help you on the path to becoming your best professional self.

The opportunity

Analyst-AMI-Assurance-ASU - TR - Technology Risk - Mumbai

AMI

The Advanced Manufacturing, Mobility & Infrastructure (AMI) Industry Market contains the following industries: Aerospace and Defence, Chemicals, Infrastructure, Industrial Products, Automotive, and Transportation that includes Mobility-as-a-Service. We help our clients to address the rapidly changing needs of our business world on not only how goods and services are bought and sold, but also on how they are designed and created. AMI builds and shares resources across sectors facing common challenges and aims to drive more effective cross-sector collaboration while enabling greater resource-pooling and developing more cohesive market responses. AMI also presents an opportunity to connect regional sector communities with a more robust, global priority sector infrastructure.

ASU - TR - Technology Risk

Assurance’s purpose is to inspire confidence and trust to enable a complex world to work. We do so by protecting and serving the public interest, promoting transparency, supporting investor confidence and economic growth and nurturing talent to provide future business leaders . We help clients by :

Your key responsibilities

Technical Excellence

• As an Technology Risk professional, you will be instrumental in conducting detailed IT audits to ensure compliance with controls and regulatory mandates, including ICFR. Your responsibilities encompass identifying ITGCs and ITACs, executing SOX compliance tasks, preparing SOCR, and performing IT process reviews. You will oversee Change Management, Access Management, Application Controls and other relevant areas, while collaborating with teams to pinpoint and mitigate control gaps. Staying current with industry developments and effectively communicating audit outcomes to stakeholders are key aspects of the role. The ideal candidate will have a solid background in IT controls and auditing, with certifications like CISA or CISSP preferred, and the capacity to thrive in a dynamic, multi-priority environment. Your key responsibilities · Conduct comprehensive IT audits to address and ensure compliance with established controls and regulatory requirements, including Internal Controls over Financial Reporting (ICFR) · Identify and review IT General Controls (ITGCs) to safeguard organizational assets and IT Application Controls (ITACs) to ensure accuracy of financial reporting · Execute SOX compliance activities, including risk assessments, controls testing, and remediation efforts · Prepare and assess Service Organization Control Reports (SOCR) to validate the effectiveness of IT controls objectives · Conduct IT process reviews through stakeholder interviews, data validations, and document analysis · Apply IT-related and internal control knowledge to deliver high quality engagement · Review Change Management processes, ensuring that changes are thoroughly reviewed, tested and approved · Review Access Management procedures to ensure proper access levels and permissions. · Evaluate and address Segregation of Duties (SOD) concerns to prevent unauthorized access and potential conflicts · Collaborate with cross-functional teams to identify control gaps and develop effective remediation plans · Stay abreast of industry trends, regulatory changes, and emerging technologies related to IT controls and compliance · Prepare and communicate audit findings, recommendations, and status updates to key stakeholders and management.
• Technical qualifications (for freshers) · Excellent analytical and problem-solving skills with attention to detail. · Effective communication and interpersonal skills for collaborating with internal teams and external auditors. · Relevant professional certifications such as CISA, CISSP, or equivalent preferred · Ability to adapt to a fast-paced environment and manage multiple priorities

Skills and attributes

To qualify for the role you must have

Qualification

• Bachelor of Technology in Computer Science
• Bachelor of Commerce
• Bachelor of Computer Applications
• Master of Commerce
• Master of Business Administration
• Master of Computer Applications
• Bachelor of Technology in Mechanical Engineering
• Bachelor of Engineering in Electrical

Experience

• Fresher
• Financial Analysis (3+ years)
• Business Intelligence (3+ years)
• Artificial Intelligence (3+ years)
• Technical Support (2+ years)
• Quality Assurance & Testing (3+ years)
• Business Analysis (3+ years)
• Data Analysis (2+ years)

What we look for

People with the ability to work in a collaborative manner to provide services across multiple client departments while following the commercial and legal requirements. You will need a practical approach to solving issues and complex problems with the ability to deliver insightful and practical solutions. We look for people who are agile, curious, mindful, and able to sustain positive energy, while being adaptable and creative in their approach.

What we offer

Fuelled by the brilliance of our people, EY has emerged as the strongest brand and the most attractive employer in our field, with market-leading growth over competitors. Our people work side‑by‑side with market‑leading entrepreneurs, game‑changers, disruptors, and visionaries. As an organization, we are investing more time, technology, and money than ever before in skills and learning for our people. At EY, you will have a personalized Career Journey and also the chance to tap into the resources of our career frameworks to better know about your roles, skills, and opportunities.

EY is equally committed to being an inclusive employer, and we strive to achieve the right balance for our people—enabling us to deliver excellent client service while allowing our people to build their careers as well as focus on their wellbeing.

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.