Government and Public Sector - Assurance- Technology Risk - Senior Manager
McLean, VA, US, 22102
EY
Mit unseren vier integrierten Geschäftsbereichen — Wirtschaftsprüfung und prüfungsnahe Dienstleistungen, Steuerberatung, Unternehmensberatung und Strategy and Transactions — sowie unserem Branchenwissen unterstützen wir unsere Mandanten dabei,...From strategy to execution, the Government & Public Sector practice of Ernst & Young LLP provides a full range of consulting and audit services to help our Federal, State, Local and Education clients implement new ideas to help achieve their mission outcomes. We deliver real change and measurable results through our diverse, high-performing teams, quality work at the highest professional standards, operational know-how from across our global organization, and creative and bold ideas that drive innovation. We enable our government clients to achieve their mission of protecting the nation and serving the people; increasing public safety; improving healthcare for our military, veterans and citizens; delivering essential public services; and helping those in need. EY is ready to help our government build a better working world.
The opportunity
When you're on our GPS team, you'll have the opportunity to work across disciplines with professionals who have broad industry sector experience and deep subject-matter knowledge. In GPS, our growth strategy focuses on being account-centric, issue-based and competency-driven. That's what differentiates EY GPS in the government marketplace.
As a member of our GPS team, you will join a talented group of professionals serving in key roles advising U.S. federal agencies addressing issues in performance improvement, program effectiveness, audit and audit readiness, financial management, and Technology Risk. The EY GPS practice focuses across disciplines with defense and national security, civilian, health, and international agencies.
Our broad portfolio of services is aimed at driving relevant, tangible results. We believe integration fosters innovation. Unprecedented challenges require support that is connected, responsive and insightful. Are you ready to join our team and help build a better working world?
Your key responsibilities
As a member of our Technology Risk (IT Audit) team, you will serve as a key resource in delivering quality client services on financial statement audits, attestation engagements and IT control projects. You will conduct research as needed, assist in the testing of IT general and application controls, prepare for and potentially lead client meetings, establish relationships with client personnel at the appropriate levels, and deepen sector and client knowledge.
Skills and attributes for success
Some key capabilities you should be prepared to bring to client-facing and internal teams include:
- Demonstrate working knowledge and aptitude in our key capabilities for example, IT general and application controls, risk management, information security, and information assurance
- Take a practical approach to solving issues and gaining client agreement
- Collaborate among team members; promote an inclusive working environment
- Provide performance feedback, training and performance reviews for technology assurance staff
- Contribute ideas/opinions to the technology assurance teams and listen/respond to other technology assurance team members' views
- Foster an efficient, innovative and team-oriented work environment
- Use technology to continually learn, share knowledge with assurance team members and enhance service delivery
To qualify for the role you must have
- Bachelor's degree in Business, Accounting, Finance, Information Systems, Information Technology or closely related field
- 8 Years of relevant experience in information assurance, information security, risk management, leading standards (e.g., COSO, ERM, FISCAM, FISMA, NIST), IT technologies (e.g., Windows, UNIX, Oracle, Mainframe, SAP), preparing written or verbal materials, and assisting with presenting project results to clients
- Participated in planning through reporting phases and oversaw the execution of relevant audit/control testing engagement (e.g., CFO Act/FISCAM, OMB Circular A-123 internal control over financial reporting/Systems (ICOFR/ICOFS), audit readiness (DOD FIAR), ATC-320 SOC-1 Examinations (SSAE-18), and FISMA security implementations and/or OIG FISMA security reviews based on DHS cyberscope metrics)
- Possess a strong understanding of IT technical security controls (e.g. NIST 800 series requirements, DOD Security Technical Implementation Guides (STIGS)), FIPS guidance, and Federal IT audit/examination methodologies (e.g. GAO FISCAM, Financial Audit Manual (FAM), and NIST RMF Assessment and Authorization).
- Experience in overseeing and completing Control testing over financial system controls compliance, IT general and application controls, and information assurance controls in areas of information assurance, access control, change control, segregation of duties and disaster recovery.
- Must be able to obtain and maintain a Top Secret-level clearance or higher.
- Due to the nature of our work in the Government and Public Sector, work may be required to be completed at client, EY and/or contractor sites. Our goal is to assign professionals to projects within a commutable distance of their work location office. In certain circumstances, travel may be required beyond your work location based on client and project needs. Candidates should be willing to travel on average 25% to 30% or more in a hybrid environment.
- US certification in one of the following:
- Certified Information Systems Auditor (CISA)
- Certified Information Systems Security Professional (CISSP)
Ideally you'll also have
- Experience executing project plans on large, complex engagements from analysis through implementation
- Worked in a Big Four, global management consulting firm or blue-chip company, preferably with a government and public sector focus
- Strong analytical and problem-solving skills
- Ability to collaborate with clients and identify engagement follow-on opportunities
- Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
- Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
- Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
- Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.
Tags: Audits CISA CISSP Clearance Compliance DoD Finance FISMA Mainframe NIST Oracle Risk management RMF SAP SOC STIGs Strategy Top Secret UNIX Windows
Perks/benefits: Career development Equity / stock options Flex hours Flex vacation Health care Startup environment
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.