Risk Consulting - Digital Risk - Staff - IT Controls

Ernst & Young Advisory Services Sdn Bhd; Bengaluru; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Ernst & Young Advisory Services Sdn Bhd in Bengaluru, India seeks an IT Audit professional with 1–3 years of experience to assess IT risks and controls, including SAP and Oracle environments, while engaging with clients to deliver high-quality risk and compliance solutions.

You will develop testing strategies, review IT general and application controls, and communicate findings clearly. The role emphasizes collaboration with cross-functional teams and timely, accurate reporting.

Qualifications

• Bachelor’s or Master’s degree with 1–3 years of related work experience.
• 2–3 years of IT Risk and Compliance experience.
• Familiarity with audit methodology and IT control testing.
• Knowledge of IT general controls, application controls, and SOC1/SOC2 reviews.

Responsibilities

• Conduct comprehensive risk assessments to identify IT risks against technology strategies and digital transformations.
• Develop and execute testing strategies to evaluate controls and identify improvement areas.
• Understand clients’ technology strategy to manage risk while transforming the business.
• Provide high-quality deliverables with proactive self-review and supervision.
• Collaborate with client personnel to analyze and enhance information systems for risk management.
• Communicate engagement findings to clients and teams via written and verbal updates.
• Stay updated on business trends relevant to the client’s operations.
• Demonstrate deep technical knowledge and quickly assimilate new concepts.
• Deliver quality services on time and within budget, with risk monitoring and stakeholder updates.

Skills

IT Audit

Risk assessment

SOX compliance

Client-facing

Communication

Report writing

Education

Bachelor's or Master's degree

Tools

SAP

Oracle

Unix/Windows

Job description

Key Responsibilities

• Conduct comprehensive risk assessments to identify and prioritize potential IT risks against technology strategies, business applications and platforms, and digital transformations.
• Develop and execute testing strategies to evaluate the effectiveness of existing controls and recommend areas for enhancement to our clients.
• Understand our clients’ overall technology strategy to effectively manage risk while transforming their business.
• Take full responsibility for tasks including consistent self-review of work to identify and improve an approach for producing high quality deliverables, while working under supervision.
• Foster relationships with client personnel to analyze, evaluate, and enhance information systems to develop and improve risk management at procedural and technology levels.
• Use knowledge of the current IT environment and industry trends to identify engagement and client service issues and communicate this information to the engagement team and client management through written correspondence and verbal presentations.
• Stay abreast of current business and industry trends relevant to the client's business.
• Demonstrate deep technical capabilities and professional knowledge and ability to quickly assimilate new knowledge.
• Consistently deliver quality client services; drive high-quality work products within expected timeframes and on budget; monitor progress, manage risk and ensure key stakeholders are kept informed about progress and expected outcome.

Skills and Attributes for Success

You will leverage your proven track record of IT Audit experience and strong interpersonal skills, to effectively deliver quality results in the assessment, design, and support implementation of controls, security and IT risk solutions.

Qualifications

• A bachelor’s or master’s degree and approximately 1-3 years of related work experience.
• At least 2-3 years of experience in IT Risk and Compliance.
• Knowledge of audit methodology.
• Design IT Risk Controls framework for SOX clients, internal audit clients.
• Implementation and testing of internal controls such as IT general controls, IT application controls, IPEs / key report testing, interface controls, etc.
• Identify control gaps, weaknesses, and areas of improvement.
• Conducting IT internal control reviews, and review of SOC1 or SOC2 reports.
• IT Risk and Controls assessment with exposure to technologies such as SAP, Oracle and OS (Unix Windows) and DB (Oracle DB, MS SQL) will be an added advantage.
• Strong exposure working in client-facing roles, collaborating with cross-functional teams including internal audits, IT security and business stakeholders to assess control effectiveness and facilitate remediation activities.
• Excellent communication, documentation and report writing skills.
• Relevant industry certifications such as CISA, CISM, CISSP, CRISC, CCSK, ISO 27001 as relevant (good to have).
• Proactiveness, eagerness to learn, embrace diverse perspectives, value differences, and build safety and trust inclusively.
• Effective organization and time management skills with the ability to work under pressure and adhere to project deadlines.
• Integrity within a professional environment.