Hybrid Tech Risk Analyst - Assurance & IT Controls

Ernst & Young Oman; San Francisco (CA); Hybrid; USD 78,000 - 100,000; Full time

Job summary

EY US is seeking a 360 Careers Analyst in Assurance - Technology Risk to join a learning-centric program designed to build foundational IT audit skills. You’ll document client processes, test controls, and work with engagement teams to plan and execute risk assessments across various industries.

You will develop expertise in SOC, ITGCs, and risk management, with on-the-job coaching and a blend of in-person and remote collaboration within a hybrid model.

Qualifications

• Have or be working toward an undergraduate or graduate degree in Accounting, Information Systems or a related discipline.
• Desire and educational requirements to pursue a relevant certification (CPA, CISA, CISSP, CA).
• A minimum cumulative GPA of 3.0 (on a 4.0 scale) is required, with a preference for candidates with a cumulative GPA of 3.2 or higher.
• An interest in working with our team-led and leader-enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year.
• Desire to work in IT audit as demonstrated by relevant course work, interest or internship experience.
• The ability and willingness to travel and work in excess of standard hours when necessary.
• Access to reliable transportation to/from the EY office and client sites. A driver’s license is strongly recommended as ride share and public transportation options may not be available in all locations.
• Candidates must be legally authorized to work in the U.S. without the need for employer sponsorship, now and in the future.
• Candidates interested in the Government & Infrastructure industry must have U.S. citizenship and be able to obtain and maintain a secret clearance or higher, within the designated time frame, which will be determined by the engagement requirements for a security clearance.

Responsibilities

• Understand and document clients’ business and IT processes, risks, and controls.
• Perform control documentation and testing through review of client evidence and interviews.
• Collaborate with members of the engagement team to plan the engagement and develop work program timelines, assign responsibilities for key tasks and prepare other planning documents.
• Monitor and manage project progress and risks, and ensuring key stakeholders are kept informed about progress and expected outcomes.
• Create flowcharts and process documentation for relevant processes.
• Perform common work assignments and projects including but not limited to: System and Organization Controls (“SOC”) reports, third-party risk assessments, IT risk and control framework design and assessments of automated and IT General Controls (ITGCs) as part of SOX and Financial Statement audits.

Skills

Accounting/IS degree awareness

CPA/CISA/CISSP/CA certification

GPA 3.0+

Hybrid work model familiarity

IT audit interest

Willingness to travel

Transportation access

US work authorization

Security clearance eligibility

Education

Accounting or Information Systems degree

CPA/CISA/CISSP/CA certification

Job description

EY US is seeking a 360 Careers Analyst in Assurance - Technology Risk to join a learning-centric program designed to build foundational IT audit skills. You’ll document client processes, test controls, and work with engagement teams to plan and execute risk assessments across various industries.

You will develop expertise in SOC, ITGCs, and risk management, with on-the-job coaching and a blend of in-person and remote collaboration within a hybrid model.