Technology Risk - Senior Associate

EY GDS; Taguig; Hybrid; PHP 1,200,000 - 2,000,000; Full time

Job summary

EY GDS Philippines is seeking a Technology Risk Assurance - Senior Associate to lead and contribute technically to risk assurance client engagements and internal projects. You will manage engagement teams, coach junior members, and ensure regulatory compliance across technology operations.

You will collaborate with IT and security teams to identify and mitigate technology risks, stay updated on regulatory changes, and foster a culture of continuous improvement within the organization.

Qualifications

• Bachelor’s degree in IT, CS, IS; MBA in any domain; CA/ACCA.
• 4+ years in IT audit, SOC reporting, ITGCs and IT automated controls.
• Certifications such as CISA, CISSP, CRISC or CISM are desirable.
• Strong IT and security frameworks, standards and best practices.

Responsibilities

• Develop and maintain the technology assurance framework including risk assessments and compliance monitoring.
• Lead planning and execution of IT audits; evaluate system controls and IT governance.
• Coordinate with stakeholders to ensure regulatory alignment (ISO 27001, SOC 2, GDPR, HIPAA).
• Manage engagement teams; provide guidance and feedback to juniors.

Skills

Analytical skills

Problem solving

Decision making

Communication skills

Interpersonal skills

Education

Bachelor’s degree in IT/CS/IS

MBA (any domain)

CA/ACCA

Tools

Word

Excel

Access

Job description

As Technology Risk Assurance - Senior Associate, you’ll be responsible for handling the engagement teams and contribute technically to Risk Assurance client engagements and internal projects within the company. The role involves assisting the Managers & Staffs while actively participating within the client engagement. In line with EY commitment to quality, you will manage risks associated with technology operations and to ensure compliance with regulatory requirements and industry best practices for your clients. As a member of the team, you’ll help to create a positive learning culture, coach and counsel junior team members and help them to develop.

Key Responsibilities

• Develop and maintain the technology assurance framework, including risk assessments, control implementation, and compliance monitoring.

• Lead the planning and execution of IT audits, including the evaluation of system controls, security protocols, and IT governance practices.

• Coordinate with internal and external stakeholders to ensure technology practices align with regulatory requirements and industry standards (e.g., ISO 27001, SOC 2, GDPR, HIPAA).

• Manage the engagement teams, providing guidance, training, and feedback to junior team members.

• Collaborate with IT and security teams to identify and mitigate technology risks, including cyber threats, data breaches, and system vulnerabilities.

• Develop and maintain productive working relationships with client and onshore stakeholders.

• Stay abreast of emerging technology trends, risks, and regulatory changes that may impact the organization.

• Foster a culture of continuous improvement and risk awareness across the organization.

• Work effectively as a team player - collaborate and share responsibility, and support team members to succeed.

• Maintain an educational program to continually develop personal skills of self and junior team members.
  

Qualifications

• Bachelor’s degree Information Technology, Computer Science, Information Systems, MBA in any domain, CA/ACCA.

• Minimum of 4 years of experience in IT audit, Service Organization Controls Reporting (SOCR - SSAE 16 / ISAE 3402) SOC 1, 2, & 3 Reporting, IT General Controls and IT Automated Controls

• Professional certifications such as CISA, CISSP, CRISC, or CISM are highly desirable.

• Strong understanding of IT and security frameworks, standards, and best practices.

• Excellent analytical, problem-solving, and decision-making skills.

• Proven ability to lead and motivate a team in a dynamic and challenging environment.

• Exceptional communication and interpersonal skills, with the ability to interact effectively with all levels of the organization.

• Knowledge of documentation and data analysis tools like Word, Excel, Access, etc.

• Willing to work on hybrid setup (Mckinley West, Taguig City)