Associate Director - Technology Risk and Cybersecurity Assurance

EM-Associate Director

Why should I work for Ernst & Young?

Being part of a dynamic, growing organization offers an exciting career path full of opportunity.

Our Technology Risk & Assurance team delivers world-class information technology assurance services. We provide services such as financial audit IT integration, service organization controls reporting and attestation services.

The opportunity is now. If you are interested in being part of a dynamic team, serving clients and reaching your full potential - Ernst & Young LLP is for you. You’ll help our clients develop an integrated, holistic approach to technology risk and assurance; and benefit from their investments in internal controls. You’ll deliver some of the most significant and class-leading technology audit and risk engagements globally across Americas, Europe and Asia Pacific.

 

The proposed Associate Director role will be responsible to lead our Expanded Assurance services. The roles and responsibilities are outlined below:

• Business Development
• Develop and maintain contact with EY PPMDs globally.
  • Identify and pursue new opportunities in the following areas:
  • Cybersecurity attestations
  • System pre-implementation reviews
  • Incident response
  • SEC Cyber disclosure norms
• Participate in proposals and pursuit activities to generate new business
• Define pricing strategies for large deals
• Client Service Delivery
• Provide high quality client service, working directly with our clients in the following areas:
• Cybersecurity attestations
• System pre-implementation reviews
• Incident response
• SEC Cyber disclosure norms
• Managing predominantly off-shore engagements – work directly with EY global teams, end clients, and relevant Big 4 teams globally. Communication, written and verbal, with these teams would be expected. This communication would include emphasizing the capabilities within the GDS to provide high-quality deliverables to support EY Global Offices.

Engagement Management:

• Manage engagement risk and project economics including planning and budgeting, define deliverable content, ensure buy-in of proposed solutions from top management levels at the client.
• Understand the process workflow related to work requests from initiation through completion, understand how workflow is managed within the firm's workflow management tool, understand optimal and required manner in which to document results of work performed
• Perform IT related controls testing and evaluation for Information Systems
• Prepare test procedures based on control requirements and documentation of test results based on testing performed.
• Report control deficiencies identified, to management and business clients.
• Manage one or more client engagements and internal teams
• Involved in Process Documentation/Flowcharts and creating SOP

Practice Development:

• Development and deployment of EY methodologies (related to risk assessment and prioritization, risk responses, and risk management capability assessments), supporting tools and other materials.

People Development

• Perform role of counsellor and coach, and provide input and guidance to staff & senior development initiatives.
• Essential Functions

Extensive experience in:

• Cybersecurity program assessments
• IT pre-implementation reviews
• IT control testing
• IT General Controls testing across platforms (Application, OS, DB) for following areas:
  • Change Management
  • User Access Management
  • Backup and Recovery Management
  • Batch Job Management
  • Problem/Incident Management
• Experience with SOX, Internal Audit, statutory audits and SSAE 16/ SSAE 18
• Experience in Big 4 is an added advantage
  Skill sets Requirement
• BE/BTech/CA and/or MBA with Finance/IT
• 15+ years of hands-on experience in the multiple areas of IT audits, Cybersecurity, IT controls testing, SOX / ICFR / IFC / SSAE, IT Financial Audit and Business Automated Controls, IT Risk consulting or any other regulatory / compliance audits in a similar role
• Experience in delivering result oriented solutions to Senior Management and Boards of Directors.
• Knowledge of IT Security aspects towards key areas like Cloud Computing, Cyber Risks, Network Security, database management systems, SDLC, IT general controls (ITGC), COBIT, COSO 2013.
• Excellent written and oral communication skills e.g. presentation to top management and report writing
• Good experience in MS Visio, excel, Powerpoint required.
• Personal drive and positive work ethic to deliver results within tight deadlines and in demanding situations
• Flexibility to adapt to a variety of engagement types, working hours and work environments and locations
• Excellent written and verbal communication skills
• Experience in managing professional service engagement teams
• Certifications of CISA, CISSP, CISM preferred

Experience Level

Mid Level