Senior Risk Consultant – Digital Risk

Jobtailor

Kolkata District

On-site

INR 1,200,000 - 2,000,000

Full time

4 days ago

Be an early applicant

Application generator

A complete application in a minute — tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

EY is seeking an experienced IT risk and internal controls professional for engagements in Kolkata. You will participate in risk assessments, support client communications, prepare reports, and help improve internal control environments through monitoring and automation.

The role requires 3–5 years in internal controls and internal audit, knowledge of COSO, SOX, J-SOX, IT security, SDLC and change management, and proficiency with data analysis tools such as Excel, SQL, Tableau or Power BI.

Qualifications

Bachelor's degree in Finance/Accounting, Electronics, Electronics & Telecommunications, Computer Science, MBA, M.Sc., or CA
3–5 years of experience in internal controls and Internal Audit
Experience in enterprise risk services with focus on IT and related standards
Understanding of COSO, internal control principles, SOX and J-SOX
Experience in application controls and information security
Knowledge of data analysis tools such as MS Excel, MS Access, MS SQL Server, ACL, and Monarch
Understanding of data analysis tools such as Tableau, Power BI, and Python
Preferred certifications: CISA, CRISC, ISO 27001 Lead Auditor

Responsibilities

Participate in IT risk and consulting engagements
Work effectively as a team member and share responsibility
Provide support, maintain communication, and update senior team members on progress
Prepare reports and schedules for clients and other parties
Develop and maintain productive working relationships with client personnel
Manage reporting on assurance findings and ensure control owners take remediation action
Lead and manage continuous improvement of internal controls through continuous control monitoring and automation
Obtain and review evidence of compliance with standards
Address compliance controls covering change management, system access, network and data, computer operations, and system development
Stay current with and promote awareness of regulatory standards, upstream risk, and industry best practices
Conduct performance reviews and contribute to staff performance feedback
Adhere to EY's Code of Conduct

Skills

Team Collaboration

Communication Skills

Stakeholder Engagement

Feedback Contribution

Risk Management

Internal Controls

Education

Bachelor's degree in Finance/Accounting, Electronics, Electronics & Telecommunications, Computer Science, MBA, M.Sc., or CA

Tools

MS Excel

MS Access

MS SQL Server

ACL

Monarch

Tableau

Power BI

Python

Tableau

NIST

Job description

Responsibilities

Participate in IT risk and consulting engagements
Work effectively as a team member and share responsibility
Provide support, maintain communication, and update senior team members on progress
Prepare reports and schedules for clients and other parties
Develop and maintain productive working relationships with client personnel
Manage reporting on assurance findings and ensure control owners take remediation action
Lead and manage continuous improvement of internal controls through continuous control monitoring and automation
Obtain and review evidence of compliance with standards
Address compliance controls covering change management, system access, network and data, computer operations, and system development
Stay current with and promote awareness of regulatory standards, upstream risk, and industry best practices
Conduct performance reviews and contribute to staff performance feedback
Adhere to EY's Code of Conduct

Requirements

Preferably bachelor’s degree in Finance/Accounting, Electronics, Electronics & Telecommunications, Computer Science, MBA, M.Sc., or CA
Minimum of 3–5 years of experience in internal controls and Internal Audit
Experience in enterprise risk services with specific focus on IT and related industry standards
Understanding of control frameworks such as COSO, internal control principles, SOX and J-SOX
Experience in application controls and information security
Understanding of risk management systems and processes
Preferred security skills related to operating systems, databases, firewalls, and IDS systems
Familiarity with SDLC and Change Management
Familiarity with ISO 27001-2, PCI DSS, NIST, ITIL, and COBIT
Experience with security testing methods, including network, operating system, and application system configuration review
Application controls and security experience, including sensitive access and SOD testing and controls testing
Knowledge of data analysis tools such as MS Excel, MS Access, MS SQL Server, ACL, and Monarch
Understanding of independent and risk-based operational audits, including SDLC, Business Resilience, Cybersecurity, Data Privacy, Data Protection, and Network Security audits
Understanding of data analysis tools such as Tableau, Power BI, and Python
Preferred certifications: CISA, CRISC, ISO 27001 Lead Auditor
Strong written and verbal communication skills
Ability to build relationships with key stakeholders across different levels of seniority

Core Competencies

Demonstrates expertise in internal controls, risk management, and compliance with industry standards, while effectively managing stakeholder relationships and communication. Proficient in data analysis and security testing methodologies to ensure robust operational audits and continuous improvement.

Highest-signal resume keywords