Requisition Id: 1523386

As a global leader in assurance, tax, transaction, and advisory services, we hire and develop the most passionate people in their field to help build a better working world. This starts with a culture that believes in giving you the training, opportunities, and creative freedom. At EY, we don't just focus on who you are now, but who you can become. We believe that it's your career and 'It's yours to build,' which means potential here is limitless and we'll provide you with motivating and fulfilling experiences throughout your career to help you on the path to becoming your best professional self.

The opportunity: Manager-NAT-Assurance-ASU - TR - Technology Risk - Pune

ASU - TR - Technology Risk:

Assurance's purpose is to inspire confidence and trust to enable a complex world to work. We do so by protecting and serving the public interest, promoting transparency, supporting investor confidence and economic growth, and fostering talent to provide future business leaders. We help clients by ensuring their accounts comply with the requisite audit standards, providing a robust and clear perspective to audit committees, and providing critical information for stakeholders. Our Service Offerings include External Audit, Financial Accounting Advisory Services (FAAS), IFRS & US GAAP conversion, IPO and other public offerings, Corporate Treasury - IFRS 9 accounting & implementation support, etc.

Job Summary:

The Technology Risk Manager will lead a team of IT auditors in conducting comprehensive IT audits, ensuring compliance with established controls, regulatory requirements, and company policies. The role involves overseeing SOX compliance activities, reviewing IT General Controls (ITGCs), IT Application Controls (ITACs), and Service Organization Control Reports (SOCR). The manager will also be responsible for guiding the team in identifying control gaps, executing risk assessments, and developing remediation plans. The ideal candidate will possess strong leadership skills, technical expertise in IT controls and auditing, and the ability to communicate effectively with cross-functional teams and management.

Your key responsibilities:

- Manage and oversee the Technology Risk team's daily operations, ensuring high-quality deliverables and adherence to timelines.

- Develop and execute IT audit plans and strategies to assess the effectiveness of IT controls, compliance, and governance processes.

- Provide expert guidance on ITGCs, ITACs, SOX 404 controls testing, Change Management, Access Management, and other relevant areas.

- Lead SOX compliance activities, including risk assessments, controls testing, and coordinating remediation efforts.

- Review and approve Service Organization Control Reports (SOCR) and ensure the team's understanding of related frameworks.

- Mentor and develop team members through knowledge sharing, training, and providing performance feedback.

- Facilitate IT process reviews and conduct stakeholder interviews, data validations, and document analysis.

- Collaborate with cross-functional teams to identify control gaps and develop effective remediation plans.

- Stay informed of industry trends, regulatory changes, and emerging technologies related to IT controls and compliance.

- Prepare and present audit findings, recommendations, and status updates to senior management and key stakeholders.

- Drive continuous improvement in the IT audit process and methodologies.

Skills and attributes

To qualify for the role you must have:

- Strong understanding of Change Management, Access Management, SOD, business process IT controls, and ICFR principles.

- Proven track record of managing audit teams and delivering results.

- Relevant professional certifications such as CISA, CISSP, or equivalent.

- Excellent analytical, problem-solving, and project management skills.

- Strong communication and interpersonal skills, with the ability to lead and work collaboratively with various teams.

- Ability to adapt to a fast-paced environment and manage multiple priorities.

Experience:

A minimum of 8 years of experience in IT controls, ITGCs, ITACs, SOX 404 controls testing, and IT auditing.

What we look for:

People with the ability to work in a collaborative manner to provide services across multiple client departments while following the commercial and legal requirements. You will need a practical approach to solving issues and complex problems with the ability to deliver insightful and practical solutions. We look for people who are agile, curious, mindful, and able to sustain positive energy while being adaptable and creative in their approach.

What we offer:

With more than 200,000 clients, 300,000 people globally, and 33,000 people in India, EY has become the strongest brand and the most attractive employer in our field, with market-leading growth over competitors. Our people work side-by-side with market-leading entrepreneurs, game-changers, disruptors, and visionaries. As an organization, we are investing more time, technology, and money, than ever before in skills and learning for our people. At EY, you will have a personalized Career Journey and also the chance to tap into the resources of our career frameworks to better know about your roles, skills, and opportunities. EY is equally committed to being an inclusive employer, and we strive to achieve the right balance for our people - enabling us to deliver excellent client service whilst allowing our people to build their careers as well as focus on their wellbeing.

If you can confidently demonstrate that you meet the criteria above, please contact us as soon as possible. Join us in building a better working world. Apply now.