Government and Infrastructure - Assurance - Tech Risk - Senior

Ernst & Young Advisory Services Sdn Bhd; McLean (VA); On-site; USD 88,000 - 161,000; Full time

Job summary

EY is seeking a Senior in Government and Infrastructure Tech Risk to join our McLean team. You will work on IT audit projects, attestations, and financial statement reviews for federal, state, and education clients, focusing on IT controls and information security.

You will engage with cross-functional teams, apply NIST/FISMA standards, and may travel as needed to support engagements across the region.

Qualifications

• Bachelor's degree required and federal security clearance obtainable.
• Experience with IT general and application controls, risk management and standards such as COSO, NIST.
• Background in information assurance and security controls for audits.

Responsibilities

• Deliver quality client services on financial statement audits, attestation engagements and IT control projects.
• Assist with testing IT general and application controls and prepare client materials.
• Build relationships with client personnel at appropriate levels and deepen sector knowledge.

Skills

Bachelor's degree in Business

Federal security clearance

Information assurance

IT general controls

IT application controls

COSO

NIST

Risk management

CISA

CISSP

Education

Bachelor's degree in Business, Accounting, Finance, Information Systems, Information Technology or closely related field

Tools

Windows

UNIX

Oracle

Mainframe

SAP

Job description

Government and Infrastructure - Assurance - Tech Risk - Senior

Location: McLean

Other locations: Anywhere in Region

Date: Oct 1, 2026

Requisition ID: 1732390

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

From strategy to execution, theGovernment and Infrastructure practice of Ernst & Young LLP providesa full range of consulting and audit servicesto help our Federal, State, Local and Education clients implement new ideas to help achieve their mission outcomes. We deliver real change and measurable results through our diverse, high-performing teams, quality work at the highest professional standards, operational know-how from across our global organization, and creative and bold ideas that drive innovation. We enable our government clients to achieve their mission of protecting the nation and serving the people; increasing public safety; improving healthcare for our military, veterans and citizens; delivering essential public services; and helping those in need. EY is ready to help our government build a better working world.

The opportunity

When you're on our Government and Infrastructure team, you'll have the opportunity to work across disciplines with professionals who have broad industry sector experience and deep subject-matter knowledge. In Government and Infrastructure, our growth strategy focuses on being account-centric, issue-based and competency-driven. That's what differentiates EY Government and Infrastructure in the government marketplace.

As a member of our Government and Infrastructure team, you will join a talented group of professionals serving in key roles advising U.S. federal agencies addressing issues in performance improvement, program effectiveness, audit and audit readiness, financial management, and Technology Risk. The EY Government and Infrastructure practice focuses across disciplines with defense and national security, civilian, health, and international agencies.

Our broad portfolio of services is aimed at driving relevant, tangible results. We believe integration foster innovative. Unprecedented challenges require support that is connected, responsive and insightful. Are you ready to join our team and help build a better working world?

Your key responsibilities

As a member of our Technology Risk (IT Audit) team, you will serve as a key resource in delivering quality client services on financial statement audits, attestation engagements and IT control projects. You will conduct research as needed, assist in the testing of IT general and application controls, prepare for and potentially lead client meetings, establish relationships with client personnel at the appropriate levels, and deepen sector and client knowledge.

Some key capabilities you should be prepared to bring to client-facing and internal teams include:

• Demonstrate working knowledge and aptitude in our key capabilities for example, IT general and application controls, risk management, information security, and information assurance
• Take a practical approach to solving issues and gaining client agreement
• Collaborate among team members; promote an inclusive working environment

To qualify for the role, you must have the following

• Bachelor's degree in Business, Accounting, Finance, Information Systems, Information Technology or closely related field
• Must be able to obtain a federal security clearance
• 2+ years of relevant experience in information assurance, information security, risk management, IT and application controls, leading standards (e.g., COSO, ERM, FISCAM, FISMA, NIST), IT technologies (e.g., Windows, UNIX, Oracle, Mainframe, SAP), preparing written or verbal materials, and assisting with presenting project results to clients
• Participated in relevant audit/control testing engagement (e.g., CFO Act/FISCAM, OMB Circular A-123 internal control over financial reporting/Systems (ICOFR/ICOFS) assessments, audit readiness (DOD FIAR), ATC-320 SOC-1 Examinations (SSAE-18), and FISMA security reviews/implementations
• Possess anunderstanding of IT technical security controls (e.g. NIST 800 series requirements, DOD Security Technical Implementation Guides (STIGS)), FIPS guidance, and Federal IT audit/examination methodologies (e.g. GAO FISCAM, Financial Audit Manual (FAM), and NIST RMF Assessment and Authorization)
• Experience in completing Control testing over financial system controls compliance, IT general and application controls, and information assurance controls in areas of information assurance, access control, change control, segregation of duties and disaster recovery
• The Government and Infrastructure Practice’s staffing model is to assign resources to projects aligned to the office within the metropolitan area you have been hired; however, in certain circumstances, travel may be required within and/or beyond your geographic region based on client and project needs. For roles within the federal practice, the flexibility to travel up to approximately 30% is preferred. Within the state, local and education practice, the flexibility to travel up to approximately 80% is preferred
• Candidate MUST be comfortable working in-person/onsite as needed

Ideally, you’ll also have

• Experienceworkingon large, complex engagementswithin the Government and Infrastructure.
• Worked in a Big Four, global management consulting firm or blue-chip company, preferably with a Government and Infrastructure focus
• Strong analytical and problem-solving skills
• Ability to collaborate with clients and identify engagement follow-on opportunities
• Excellent verbal and written communication skills
• Preferred Certification
• Certified Information Systems Auditor (CISA)
• Certified Information Systems Security Professional (CISSP)

What we offer you

At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers.

• We offer a comprehensive compensation and benefits package where you’ll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job is:
• New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $105,400 to $175,400
• Bay Area California offices – $109,700 to $182,800
• All other offices locations in the US, including Sacramento – $87,800 to $160,900
• Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.
• Under our flexible vacation policy, you’ll decide how much vacation time you need based on your own personal circumstances. You’ll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.

EY | Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

All in to shape the future with confidence.

EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information,national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.

EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY’s Talent Shared Services Team (TSS) or email the TSS at [e-mail] .

Select how often (in days) to receive an alert:

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.