Senior Manager - Technology Risk

Ernst & Young Advisory Services Sdn Bhd; Auckland; Hybrid; NZD 180,000 - 240,000; Full time

Benefits offered by this job

Career development

Flexible work arrangements

Comprehensive benefits

Job summary

EY Auckland is seeking a Senior Manager – Technology Assurance to oversee client engagements and lead Technology Risk professionals in delivering IT control engagements. You will drive innovation, build client trust, and help improve risk governance across diverse industries.

The role is hybrid with a base in Auckland. Candidates with strong IT risk, SOX/ITGC, and SOC experience, plus leadership capabilities, will thrive in this collaborative and fast-paced environment.

Qualifications

• Lead audits/assessments of IT processes against leading practice IT risk frameworks (e.g., CoBIT, ITIL, ISO 27001, SOX).
• Manage teams to deliver IT Assurance/Audit engagements including IT general controls and application controls.
• Coordinate SOC 1/2/3 and other assurance engagements with stakeholders.
• Define audit objectives and test criteria per methodologies and criteria.
• Audit client accounting systems and core business applications.
• Evaluate IT and business process controls and mitigate risks.
• Partner with internal/external teams to address compliance and risk.
• Present findings to Senior Management and Audit Committees.

Responsibilities

• Oversee a portfolio of client engagements and manage Technology Risk professionals.
• Lead delivery of IT assurance engagements with scope across ITGCs and application controls.
• Drive continuous improvement and innovative approaches to enhance client outcomes.
• Establish audit objectives, design tests, and report on control effectiveness.
• Advise clients on IT risk, controls, and governance in financial institutions.

Skills

IT risk assessment

IT controls design

Audit leadership

SOC audits

Regulatory compliance

Team management

ITIL/CoBIT/ISO27001

Data security

Education

Bachelor's/Master's in IT or related

CPA/CISA/CA/CISM/CISSP

Tools

SOC reporting tools

GRC tools

Job description

Senior Manager Technology Assurance

With your contribution and my contribution, together we will thrive.

The opportunity

As our Senior Manager you’lloversee a portfolio of client engagements and manages Technology Risk professionals in the delivery of information technology control engagements. You will identify opportunities for innovation and continuous improvement to deliver valuable outcomes for our clients. You will establish and leverage trusted relationships with our clients across a diverse range of industries, and work with them to build trust and confidence in our services.

This is a hybrid role and will be based in our Tāmaki Makaurau (Auckland) office

Skill and attributes for success

• To be considered for this role you must have the following skills & experienceLead the execution of audits/assessments of IT processes against leading practice IT risk and security frameworks and common standards (e.g. CoBIT, ITIL, ISO 27001, Sarbanes Oxley Act).
• Manage teams to deliver IT Assurance/ Audit engagements - including evaluating the design and operating effectiveness of IT controls (e.g. application & IT general controls) in support of audits to meet external financial reporting requirements.
• Manage teams to deliver other assurance engagements including SOC 1, SOC 2, SOC 3, agreed upon procedures, reasonable and limited assurance engagements.
• Establish audit objectives, and design and test as per audit methodologies, processes and audit report criteria.
• Conduct audit of client’s accounting systems and key business applications.
• Evaluate the effectiveness of IT and relevant business/ operational processes, activities, policies and systems.
• Partner with internal and external teams, addressing compliance, financial and operational risk, and assessing current state internal controls and frameworks in order to mitigate current and emerging risks.
• Report on the existence and effectiveness of the system of internal controls, and present findings of each engagement to Senior Management and Audit Committees as required and apply a thorough understanding of complex information systems (e.g., operating systems, databases, ERP, Data Warehouse, SaaS etc).

Ideally, you’ll alsohave the skills and attributes below but don’t worry if you don’t tick all the boxes. We’re interested in your aptitude, attitude and willingness to learn.

• A Bachelor or Master’s degree qualification in IT or related discipline, although finance, business or accounting qualifications will also be considered.
• Professional accreditations and qualifications will also be considered favourably (CPA, CISA, CA, CIA, CISM, CISSP, CBCP, CIPP)
• Experience working on Audit engagements such as External IT Audits, IT General Controls, SOC1, SOC2, SOC3, SOX, GS007 or ASAE Audits.
• Experience in leading and managing Line1 and Line 2 technology risk governance roles in Financial Institutions.
• A passion for emerging technologies and working within a team to advise clients on how to manage IT risks and accelerate performance.

What we offer you

At EY, we’ll fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more .

• Career development:At EY, your career is yours to shape! We’ll develop you with future-focused skills and equip you with world‑class experiences www.ey.com/nz/careerdevelopment
• Flexible work arrangements:Our flexible work policies empower you to balance your professional and personal life, fostering a culture of trust and autonomy.
• A comprehensive benefits package: From a yearly wellness incentive,to access to additional 8 weeks of flex leave per year, and family‑friendly policies, includingup to26 weeks of gender-neutral paid parental leave, we cater to your diverse needs to help you thrive both personally and professionally www.ey.com/nz/benefits
• Salary:We offer a competitive salary which is open to negotiation pending on skills and experience.

Inclusiveness iscore to who we areandhow we worktogether, driving value for our peopleandfor our business.We encourage applications from people of all ages, nationalities, abilities, cultures, sexual orientations, and gender identities and are committed to providingan equitableand barrier free recruitment experience for all. We encourage you to share any support and adjustments you need to be your best andparticipateequitably in our recruitment process.We understand sharing your needs with us can be daunting, so if you have questions before or during your application, we welcome you to get in touch at [e-mail] or+64 9 300 7044(option 2). Anything you tell us will be kept completely confidential.

#LI-Hybrid

EY | Building a better working world

Our preferred applicant will be required to undertake employment screening by EY or our external third-party provider.

Select how often (in days) to receive an alert:

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.