Technology Risk (IT Audit) - Manager

EY; Kuala Lumpur; On-site; MYR 150,000 - 230,000; Full time

Benefits offered by this job

Flexible working arrangements

Continuous learning

Inclusive culture

Job summary

EY in Malaysia seeks a Technology Risk Manager to lead IT risk engagements, assess IT systems, and mitigate business risks. You will guide teams, deliver assurance or risk consulting engagements, and help strengthen internal controls and governance across client environments.

With 5+ years of IT audit/consulting experience, you will manage projects, communicate effectively with client management, and explore cross-sell opportunities within the firm to drive value.

Qualifications

• Recognized university degree in accounting, business, information technology, engineering, mathematics or related field.
• At least 5 years of IT audit, consulting or industry experience in a professional services setting or multinational.
• Experience with financial statement audits, internal/operational audits, ISAE 3402, ERP security and controls, SOX, and data analytics tools.

Responsibilities

• Lead multiple client engagements at an executive level within the technology risk practice.
• Assess IT systems and mitigate IT-related business risks, including governance and controls.
• Guide junior staff, plan engagement objectives, and ensure delivery per professional standards.
• Identify opportunities to cross-sell services within existing clients.

Skills

Analytical skills

Problem solving

Project management

Communication skills

Client management

Cross-sell capabilities

Education

University degree in IT/Accounting/Engineering or related

Tools

ACL

IDEAL

SQL

Tableau

Spotfire

Job description

We enhance performance through creating risk-enabled organizations. We help clients identify importantrisks, design frameworks to manage them and improve the effectiveness and efficiency of riskmanagement. As a risk transformation professional, you will be addressing client issues such as businessperformance variability, business and process controls transformation and automation; applicationsecurity integrity, governance, risk and control (GRC) technology enablement, business and/or IT GRC,continuous monitoring, vendor and contract risk management, IT risk management as well as to supportand manage technology risk audits. You will belong to an international network of specialists helping ourclients transform risk functions and implement technology solutions that support risk management andgovernance.

We will support you with career-long training and coaching to develop your skills in risk strategy, riskfunction design, risk management and performance enhancement. As EY is a global leading serviceprovider in this space, you will be working with the best of the best in a collaborative environment. Sowhenever you join, however long you stay, the exceptional EY experience lasts a lifetime.

The opportunity

You will be responsible for managing multiple client engagement teams at an executive level within thepractice and the firm. Engagements focus on the assessment and/or evaluation of IT systems and themitigation of IT-related business risks. Engagements may be either assurance (attestation) and/or riskconsulting in nature, and vary considerably in size and complexity.

All of our Technology Risk services whether assurance or consulting in nature are designed for the dualpurpose of strengthening internal controls and, in so doing, helping to improve IT and businessperformance.

In addition to assurance-related engagements such as financial attestation and ISAE 3402 engagements,you will focus on IT governance and effectiveness; IT program management and assurance; security andcontrols of ERP implementations; and business intelligence and information analysis.

As a Manager within the Technology Risk team, you will provide guidance and share knowledge withteam members and participate in performing procedures especially focusing on complex, judgmentaland/or specialized issues.

You will work with the team and the client to create plans for accomplishing engagement objectives and astrategy that complies with professional standards and addresses the risks inherent in the engagement.

Your key responsibilities

• Brief the engagement team on the client's IT environment and industry IT trends
• Maintain relationships with client management to manage expectations of service, including workproducts, timing, and deliverables
• Demonstrate a thorough understanding of complex information systems and apply it to clientsituations
• Use extensive knowledge of the client's business/industry to identify technological developmentsand evaluate impacts on the client's business
• Demonstrate excellent project management skills, inspire teamwork and responsibility withengagement team members
• Use current technology/tools to enhance the effectiveness of deliverables and services

Skills and attributes for success

• Strong analytical and problem-solving skills
• Strong drive to excel professionally, and to guide and motivate others
• Advanced written and verbal communication skills
• Dedicated, innovative, resourceful, and able to work under pressure
• Foster an efficient, innovative and team-oriented work environment

To qualify for the role you must have

• A recognized university degree in accounting, business, information technology, engineering,mathematics or other relevant discipline
• At least 5 years of relevant IT audit, consulting or industry experience, preferably in a professionalservices environment or MNC.
• Significant experience in having applied relevant technical knowledge in at least one of the following engagements:
  1. (a) financial statement audits;
  2. (b) internal or operational audits;
  3. (c) ISAE 3402 engagements;
  4. (d) ERP security and controls reviews (Oracle, SAP, PeopleSoft)
  5. (e) SOX integrated audits and/or
  6. (f) application of data analytics for business process reviews (e.g., ACL, IDEAL, SQL, Tableau,Spotfire)
• Strong project management skills and able to manage a portfolio of engagements
• Ability to identify and cross sell services within the firm to existing clientele

Ideally, you should also have

• Professional certification e.g. CPA, CA, CISA, CISSP, CISM, COBIT, ISMS, CBCP, CIA, CIPP,CGEIT, CIPM or CIPP certification or other related certifications
• Experience in financial institutions (i.e. banking, insurance, wealth/asset management etc.)
• Knowledge in central bank regulatory framework
• Strong grasp of business and technical issues and industry trends

What we look for

Highly motivated individuals with excellent problem-solving skills and the ability to prioritize shiftingworkloads in a rapidly changing industry. An effective communicator, you’ll be a confident leaderequipped with strong people management skills and a genuine passion to make things happen in adynamic organization. If you’re ready to take on a wide range of responsibilities, and are committed toseeking out new ways to make a difference, this role is for you.

What working at EY offers

EY offers a competitive remuneration package commensurate with your work experience where you’ll berewarded for your individual and team performance. We are committed to being an inclusive employerand are happy to consider flexible working arrangements, where this may be needed, guided by our FWAPolicy. Plus, we offer:

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningfulimpact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leaderthe world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use yourvoice to help others find theirs.

The exceptional EY experience. It’s yours to build.

EY | Building a better working world

EY exists to build a better working world, helping to create long -term value for clients, people and society
and build trust in the capital markets.
Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance
and help clients grow, transform and operate.
Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions
to find new answers for the complex issues facing our world today.

Select how often (in days) to receive an alert:

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.