Join EY's Global Delivery Services as a Senior Consultant within the Digital Risk - ITRM team. This is an excellent opportunity to contribute to a growing service offering within a leading global firm. You will be integral to enhancing our client's IT risk and control environment, leveraging your expertise to drive impactful consulting engagements.

Our Global Delivery Services network spans across ten countries, employing over 80,000 professionals dedicated to providing comprehensive support to EY's global growth agenda. We offer a diverse range of services, including Consulting, Assurance, Tax, and Strategy & Transactions, enabling account teams worldwide to deliver exceptional client service. Our innovation specialists are key in creating environments for rapid prototyping and forward-thinking solutions across various technology domains.

This role is perfect for those seeking to build a unique career, supported by global scale, an inclusive culture, and cutting-edge technology. Your perspective will be valued in helping EY achieve its goals and build a better working world.

As a Senior Consultant, you will actively participate in IT Risk and consulting engagements, collaborating effectively within a team. Key responsibilities include preparing client reports, developing productive client relationships, and managing reporting on assurance findings to ensure timely remediation.

You will lead initiatives for continuous improvement of internal controls through automation and monitoring. This involves obtaining and reviewing compliance evidence for various domains like change management, access control, network security, and system development. A deep understanding of control frameworks such as COSO, and regulations like SOX and J-SOX is essential.

Further responsibilities include staying current with regulatory standards and industry best practices. You will also be involved in conducting operational audits for areas such as SDLC, Business Resilience, Cybersecurity, and Data Privacy. Experience with data analysis tools like Tableau, Power BI, and Python is expected, along with contributing to staff performance reviews and upholding the EY Code of Conduct.

To excel in this role, you should possess experience in application controls and information security, with a solid understanding of risk management systems and processes. The ability to build strong stakeholder relationships across various seniority levels and excellent written and verbal communication skills are crucial.

We prefer candidates with a Bachelor’s degree in Finance/Accounting, Electronics, Computer Science, or an MBA/M.Sc./CA. A minimum of 3-5 years of experience in internal controls and internal audit, with a focus on IT within enterprise risk services, is required. Familiarity with control frameworks like COSO, and regulations such as SOX and J-SOX, is a must.

Preferred qualifications include expertise in security skills across various operating systems, databases, or security tools, and familiarity with IT analysis and operations methods like SDLC and Change Management. Knowledge of security and risk standards including ISO 27001-2, PCI DSS, NIST, ITIL, and COBIT, alongside experience in security testing methods, is highly advantageous. Proficiency with data analysis tools such as MS Excel, Access, SQL Server, ACL, and Monarch is also preferred. Relevant certifications like CISA, CRISC, or ISO 27001 Lead Auditor are a plus.