GDS Assurance - Technology Risk (FS) - Staff

Ernst & Young Advisory Services Sdn Bhd; Taguig; On-site; PHP 600,000 - 900,000; Full time

Job summary

EY GDS is seeking a Technology Risk Consultant staff to support assurance and advisory engagements in Manila. The role involves evaluating IT controls, governance, and program management, with emphasis on ERP environments and cloud technologies.

You will collaborate with onshore and offshore teams to deliver high-quality IT risk services, including control testing, test procedures, and reporting of deficiencies. A relevant degree and SOX/SSAE 16 familiarity are preferred.

Qualifications

• Bachelor's degree in accounting, computer science, information systems, engineering, or related discipline.
• Previous roles include IT Audit Staff, IT Compliance Specialist, IT Internal Auditor, or Information Risk Consultant.
• Must be amenable to work in McKinley Hill, Taguig City or Ortigas; willing to work beyond standard hours.
• Passport may be required for travel or assignments.

Responsibilities

• Develop and maintain client relationships to manage service expectations and deliverables.
• Evaluate client's IT environment and apply understanding of complex information systems.
• Deliver high-quality client service with offshore/onshore teams; communicate clearly with EY teams.

Skills

ITGC

ITAC

SOX/SSAE16

CISA/CISM/CRISC

ERP Systems

Cloud

Agile

IS Standards

Education

Bachelor's degree (relevant field)

Tools

SAP

Oracle

JD Edwards

Hyperion

Salesforce

PeopleSoft

SQL

Job description

GDS Assurance - Technology Risk (FS) - Staff

Location: Taguig

Other locations: Primary Location Only

Date: Oct 2, 2026

Requisition ID: 1748225

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Technology Risk Consultant

Technology Risk covers all risk services where EY is providing independent assurance and the preparation towards assurance to our clients where the assurance can be used by our clients to build confidence and trust with their customers, the general market/public, key stakeholders or when regulatory (by law or oversight) or contractually required. Engagements focus on the assessment and/or evaluation of IT systems and the mitigation of IT-related business risks. Engagements may be either assurance (attestation) and/or risk advisory in nature, and vary considerably in size and complexity.

The Opportunity

All of our services whether assurance or advisory in nature are designed for the dual purpose of strengthening internal controls and, in so doing, helping to improve IT and business performance. In addition to assurance-related engagements such as financial attestation and SSAE 16 engagements, our IT risk advisory services focus on IT governance and effectiveness; IT program management and assurance; security and controls of ERP implementations; and business intelligence and information analysis.

Job Description- Technology Risk– Consultant

Entity: EY GDS

Position Title: Consultant

Location– Manila (McKinley, Taguig City)

Reports to Senior/Manager/Senior Manager

Supervises- None

KEY RESPONSIBILITIES

Business Development

• Develop and maintain client relationships to manage expectations of service, including work products, timing, and deliverables.
• Demonstrate a thorough understanding of complex information systems and apply to client’s IT environment

Client Service Delivery

• Provide high quality client service, working directly with onshore teams to understand and evaluate client’s IT environment.
• Working predominantly on off-shore engagements. Communication, written and verbal, with the local EY teams would be expected.

Engagement Management

• Understand the process workflow related to work requests from initiation through completion and how workflow is managed within the firm's online tool for audit monitoring and project management.
• Perform IT related controls testing and evaluation for Information Systems
• Prepare test procedures based on control requirements and documentation of test results based on testing performed
• Report control deficiencies identified, to team Senior/Manager
• Use extensive knowledge of the client's business/industry to identify technological developments and evaluate impacts on the client's business.

Practice Development

• Adherence to EY audit methodologies (related to risk assessment and prioritization, risk responses, and risk management capability assessments), supporting tools and other materials.

Skills and attributes for success

• Ø Good Exposure in (at least 1-3 year experience):
• · IT General Controls across platforms (Application, Operating System, Database) for following areas:
• § User Access Management
• § Change Management
• § Backup and Recovery Management
• § Batch Job Management
• § Problem/Incident Management
• · IT Application Controls: Business Process cycles (Procure to Pay, Order to Cash, Inventory, Payroll, Treasury, Record to Report)
• · Generally accepted audit standards, and Corporate Internal Audit standards
• · Experience with SOX, Internal Audit and SSAE 16 (At least 1 of 3)
• Ø Preferably with at least one of the following certifications– CISA, CISM, CRISC, CIA; non certified hires are required to become certified within 1 year from the date of hire.
• Ø Working knowledge of:
• · System architecture, business processes and system risks
• · Application systems (SAP, Oracle, JD Edwards, Hyperion, Microsoft Nav, Salesforce, PeopleSoft)
• · Operating system and database platforms (Windows 2008/2012/2016, Unix, OS400, Mainframe, SQL, Oracle, DB2, Red Hat Enterprise Linux 6/7, etc.)
• · Application and/or Database Administration (SQL, Oracle, Salesforce, Ultipro, Workday, etc)
• · Knowledgeable in Agile software methodology and Cloud Technology
• · Able to build Macros, VBA
• Ø Good understanding of industry standards and frameworks such as ISO/IEC 27001, COBIT 5, ITIL, COSO etc.
• Ø Strong written, oral communication, and presentation skills.

To qualify, you must have:

• A bachelor's degree accounting, computer science, information systems, engineering, or a related discipline
• Previous roles– IT Audit Staff, IT Compliance Specialist, IT Internal Auditor Information Risk Consultant, Information Security Analyst and other related roles
• Must be amenable to work in McKinley Hill, Taguig City or Ortigas
• Successful candidate must work in excess of standard hours when necessary. A valid passport is required

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

Select how often (in days) to receive an alert:

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.