Senior Manager - Technology Risk Assurance

About the role

EY is hiring a Senior Manager for Technology Risk Assurance in Melbourne (Naarm). As Senior Manager you will oversee a portfolio of client engagements and lead Technology Risk professionals delivering information technology control engagements. You will identify opportunities for innovation and continuous improvement, and build trusted relationships with clients across a wide range of industries. The position is hybrid and may be adjusted to work flexibly with reduced hours.

Key responsibilities

• Lead audits and assessments of IT processes against leading practice IT risk and security frameworks and standards such as CoBIT, ITIL, ISO 27001 and the Sarbanes-Oxley Act.
• Manage teams delivering IT assurance and audit engagements, including evaluating the design and operating effectiveness of IT controls (application and IT general controls) to support external financial reporting audits.
• Manage teams delivering other assurance engagements such as SOC 1, SOC 2, SOC 3, agreed-upon procedures and reasonable and limited assurance engagements.
• Set audit objectives, design and test according to audit methodologies, processes and report criteria, and audit client accounting systems and key business applications.
• Evaluate the effectiveness of IT and business processes, policies and systems, and partner with internal and external teams on compliance, financial and operational risk and internal controls.
• Report on the existence and effectiveness of internal controls and present findings to Senior Management and Audit Committees, applying a thorough understanding of complex information systems such as operating systems, databases, ERP, data warehouses and SaaS.

Required profile

• A Bachelor's or Master's degree in IT or a related discipline; finance, business or accounting qualifications are also considered.
• Professional accreditations such as CPA, CISA, CA, CIA, CISM, CISSP, CBCP or CIPP are considered favourably.
• Experience on audit engagements such as external IT audits, IT general controls, SOC 1/2/3, SOX, GS007 or ASAE audits.
• Experience leading line 1 and line 2 technology risk governance roles in financial institutions is ideal.

Required skills

• Knowledge of IT risk and security frameworks (CoBIT, ITIL, ISO 27001, Sarbanes-Oxley)
• Ability to evaluate IT general controls and design and test IT controls
• Understanding of complex information systems (ERP, databases, SaaS)

What we offer

• Career development with future-focused skills and world-class experiences.
• Flexible work arrangements.
• A benefits package including a yearly wellness incentive, an extra 8 weeks of flex leave per year, and up to 26 weeks of gender-neutral paid parental leave.
• A competitive salary open to negotiation depending on skills and experience.