Risk Consulting - Cloud Risk - Manager

Ernst & Young Advisory Services Sdn Bhd; New York (NY); On-site; USD 124,900 - 260,400; Full time

Job summary

Ernst & Young Advisory Services Sdn Bhd seeks an IT risk advisor with strong IT audit background for our risk assurance practice in the United States. You will lead engagement teams, assess client IT controls, and help design cloud risk governance with emphasis on security and regulatory compliance.

The role requires 5+ years of experience, travel up to 50%, and the ability to work with high‑level client personnel across cloud platforms (Azure, AWS, GCP).

Qualifications

• Bachelor’s or Master’s degree required.
• 5+ years of IT audit or IT risk advisory experience in public accounting or professional services.
• Experience in at least one engagement: financial statement audits, internal/operational audits, SOC reporting, ERP security, or cloud risk engagements.
• Willingness to travel at least 50% and work outside assigned office; passport may be required.

Responsibilities

• Lead multiple client engagement teams at an executive level.
• Analyze, evaluate, and enhance information systems facilitating internal control.
• Assist clients and Risk Assurance professionals in IT control and security engagements.
• Develop and deploy cloud risk governance frameworks with clients.
• Coordinate with EY groups on cloud risk monitoring initiatives and cloud risk transformation discussions.

Skills

IT auditor

IT risk adviser

cloud risk governance

ERP security

Education

Bachelor's or Master's degree

Job description

Location: New York, Boston, Philadelphia, Hoboken, McLean, Atlanta, Charlotte, Dallas, Houston, Chicago, Detroit, Cleveland, Seattle, San Francisco, Miami, Los Angeles

The opportunity

The objective of our Consulting Risk services is to provide clients with a candid and reliable overview of their risk landscape. Our solutions can be used by our clients to build confidence and trust with their customers, the overall market and when required by regulation or contract.

For our Cloud Risk services, our teams look to establish a fit‑for‑purpose and proactive cloud risk framework and oversight capability to ensure consistency, transparency, and sustainability of public cloud use across the lines of defense.

Your key responsibilities

You will be responsible for managing multiple client engagement teams at an executive level within the practice and the firm. You can expect to work with high‑level client personnel to analyze, evaluate, and enhance information systems facilitating the business internal control process, and will assist clients and other Risk Assurance professionals in performing information technology control and security engagements.

Skills and attributes for success

• Provide guidance and share knowledge with team members and participate in performing procedures especially focusing on complex, judgmental and/or specialized issues. Work with the team and the client to create plans for accomplishing engagement objectives and a strategy that complies with professional standards and addresses the risks inherent in the engagement.
• Brief the engagement team on the client's IT environment and industry IT trends. Maintain relationships with client management to manage expectations of service, including work products, timing, and deliverables. Demonstrate a thorough understanding of complex information systems and apply it to client situations.
• Bring and utilize extensive knowledge of the client's business/industry to identify technological developments and evaluate impacts on the client's business. Demonstrate excellent project management skills, inspire teamwork and responsibility with engagement team members, and use current technology/tools to enhance the effectiveness of deliverables and services.
• Understand EY and its service lines and actively assess what the firm can deliver to serve clients.
• Partner with clients on the development and deployment of cloud risk governance frameworks, ensuring alignment with organizational goals and adherence to regulatory standards.
• Lead risk discussions on cloud transformation including migration from on‑prem.
• Coordinating with technical EY groups on cloud risk monitoring initiatives, that employ advanced tools to proactively identify and mitigate risks across various cloud service models and deployments.
• Design robust cloud control mechanisms and, on engagements where independent, evaluate effectiveness in mitigating risks and maintaining compliance.

To qualify for the role you must have

• A bachelor's or master's degree
• A minimum of 5 years of experience working as an IT auditor or IT risk adviser for a public accounting firm, a professional services firm, or within industry
• Bring your significant experience in applying relevant technical knowledge in at least one of the following engagements: (a) financial statement audits; (b) internal or operational audits; (c) Service Organization Controls Reporting engagements; (d) ERP security and control reviews (Oracle, SAP, PeopleSoft); and/or (e) cloud risk engagements (Azure, AWS, GCP)
• We would expect for you to be available to travel outside of their assigned office location at least 50% of the time, plus commute within the region (where public transportation often is not available). Successful candidates must work in excess of standard hours when necessary. A valid passport is required.

Ideally, you’ll also have

• A bachelor's or master's degree in business, accounting, finance, computer science, information systems, engineering, or a related discipline
• CPA, CA, CISA, CISSP, CISM, CBCP, CIA, CIPP, CGEIT certification is desired; If you are non‑certified, you are required to become certified within 1 year from your date of hire.
• Additional cloud‑based certifications to credentialize but do not currently meet the rigor of the certification requirement above:
• CCSP – Certified Cloud Security Professional
• CCSK – Certificate of Cloud Security Knowledge
• CCAK – Certificate of Cloud Auditing Knowledge

What we offer you

At EY, we’ll develop you with future‑focused skills and equip you with world‑class experiences. We’ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learnmore .

• We offer a comprehensive compensation and benefits package where you’ll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job in all geographic locations in the US is $124,900 to $229,100. The base salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is $150,000 to $260,400. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.
• Join us in our team‑led and leader‑enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40‑60% of the time over the course of an engagement, project or year.
• Under our flexible vacation policy, you’ll decide how much vacation time you need based on your own personal circumstances. You’ll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well‑being.

EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity or expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.

EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1‑800‑EY‑HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY’s Talent Shared Services Team (TSS) or email the TSS at [e-mail].