FSO, Digital Risk IT Controls Advisory Senior 1

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better. Join us and build an exceptional experience for yourself, and a better working world for all.   The exceptional EY experience. It's yours to build.   EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities.  

This position could be located in NY, NC, IL, CA.

 

EY is a leader in serving the global financial services marketplace and the only professional services firm with a separate business unit dedicated to the financial services industry – the Financial Services Organization (FSO). Our focused model and bold ambition have put us at the center of the events that continue to reshape and redefine our industry, working side by side with a range of clients from our most venerable institutions to dynamic new entrants across Banking and Capital Markets, Wealth and Asset Management, Insurance, and Real Estate, Hospitality and Construction. Our purpose is to help build a financial services industry in which financial institutions are trusted and flourish, and the global economy is healthy, growing and secure. If you have a passion for rallying together to solve complex challenges, then come join our dynamic FSO team!

 

The opportunity

 

Join the leading Digital Risk team, the IT internal audit, SOX, and 1st line and 2nd line control testing service provider to the financial services industry, providing industry-focused professionals with deep knowledge in internal audit, SOX, approaches/methodologies and IT controls, regulatory, privacy and security skills.

 

Everything you will be involved comes down to providing professional services to clients and helping ensure your teams do the same. Whether it is performing and managing IT internal audit outsource/co-sourced/transformation engagements, addressing client concerns over internal controls around security and/or privacy, performing IT SOX assessments and assisting with business development activities across financial services’ sectors, you will build strong relationships and become a trusted advisor to your clients while focusing on identification, rationalization, testing, and optimization of risks and controls.

 

Within EY’s Technology Risk practice, you will be working with client personnel and your team to assess the internal audit universe, plan and perform the risk assessment for internal audit, analyze and evaluate company’s complex IT systems, infrastructure, and risk issues, ensuring the execution of the audit plan and preparing audit reports to be shared with key stakeholders.

 

In addition to our IT Internal Audit and SOX offering, you will support control testing programs or targeted IT assessments across other lines of business whether it be regulatory or risk driven.

 

Some projects that you will be part of cover key topics such as agile methodologies and emerging risks such as generative Artificial Intelligence (AI), cloud security, cyber security and resiliency, automation, internal control analysis and testing, controls transformation, Sarbanes-Oxley (SOX) testing, and specialized functional and technical assessments to be in line with risk advisory.

 

In this role, you will help organizations assess their overall risk and execute on their operational risk frameworks. You will understand how quality and risk topics work together and execute on the enterprise risk framework controls and continued enhancement of the enterprise risk framework. Leveraging appropriate enterprise risk assessment techniques and risk mitigation techniques, you will:

• Develop and maintain risk control frameworks and design solutions in real time that can help define risk appetite, risk tolerance, and KRIs for organizations.
• Design and develop an Asset Management platform or a tool for continuous monitoring of technology (hardware and software)
• Provide recommendations to drive cost efficiency in current usage and future spend.

 

Your key resp