Government and Infrastructure-Service Delivery Center-Enterprise Risk. Associate Analyst/Analyst

EY•San Antonio, TX

9d•$37,200 - $86,400

About The Position

EY’s Government & Infrastructure practice provides consulting and audit services to Federal, State, Local and Education clients. The Service Delivery Center (SDC) is a US-based delivery organization that works with client-site consulting teams to execute project-based work and managed services for government clients. SDC Risk teams deliver repeatable, high-quality work according to agreed procedures, quality standards and service levels. This role is aligned with the Enterprise Risk, Controls & Resilience team. It supports government organizations’ internal controls, OMB Circular A-123, audit-readiness, internal audit, enterprise risk, resilience, third-party risk and compliance programs. Work may include controls monitoring and testing, process and control documentation, evidence management, deficiency and corrective action tracking, vendor assessments, compliance and resilience support, and recurring reporting. The role carries out defined engagement tasks and managed-service activities. It is a delivery career path intended to build hands-on expertise, with potential progression toward Senior Analyst and Delivery Manager roles or deeper specialization. At the Analyst level, the role also reviews Associate Analysts’ work products and helps onboard new team members.

Requirements

Bachelor’s degree with an emphasis in Accounting, Finance, Business, Economics or a related field.
Associate Analyst: up to 1 year of experience in accounting, audit, internal controls, risk, third-party risk or compliance, or demonstrated ability to learn and perform the role. Analyst: at least 2 years of experience in one or more of those areas.
United States citizenship and ability to obtain and maintain a public trust clearance or higher; some engagements require Secret clearance.
Strong communication skills and ability to analyze business, financial or technical information and help solve problems.
Flexibility and ability to work with a nationally distributed team.
Proficiency in Microsoft Word, Excel, PowerPoint and SharePoint, and ability to become proficient with Tableau or Power BI and Visio.
Ability to meet tight deadlines and follow up on open issues.
Flexibility to travel up to 20%.
Intellectual curiosity and professional skepticism.
Attention to detail and commitment to accurate, consistent work.
Effective teaming and collaboration with people from varied backgrounds and skillsets.
Understanding of internal control concepts and frameworks such as the GAO Green Book, COSO and OMB Circular A-123, including control testing and risk and control self-assessment.
Ability to quickly understand complex financial business processes involving multiple stakeholders and information systems.
Knowledge of working-paper documentation standards.
Understanding of third-party risk and business continuity concepts, including vendor risk tiering, due-diligence questionnaires, SOC reports, ongoing monitoring, common vendor risk domains and business impact analysis.
Knowledge of effective use of firm-approved AI tools to improve problem-solving and productivity, with sound judgment about AI-related risks and considerations.
Ability to assess and articulate evolving AI risks to clients across multiple risk domains, including AI embedded in vendor products and services.

Nice To Haves

Progress toward a relevant certification such as CIA, CGFM, CDFM, CPA, CTPRP or CBCP.
Exposure to OMB Circular A-123, the GAO Green Book, state internal control requirements, audit readiness, GRC platforms such as Archer, Optro (formerly AuditBoard) or ServiceNow, third-party risk management platforms such as ServiceNow Vendor Risk Management, OneTrust or ProcessUnity, or vendor risk intelligence tools such as BitSight or SecurityScorecard.
Advanced Excel skills, such as Power Query and pivot tables, or experience with analytics tools such as Power BI, Tableau or Alteryx.

Responsibilities

Carry out assigned engagement tasks according to defined procedures, timelines, quality standards and service levels (SLAs and KPIs).
Document clients’ business and financial processes, risks and controls by collecting information from process owners, supporting walkthroughs, and preparing process maps and narratives.
Prepare and track documentation (PBC) requests, and collect, organize and maintain evidence in engagement repositories.
Test control design and operating effectiveness against established test plans and document results to working-paper standards, using guidance such as OMB Circular A-123 and relevant state requirements.
Track deficiencies and corrective action plans (CAPs), and compile observations and root-cause information under guidance.
Maintain vendor inventories, risk tiering and assessment trackers; issue and follow up on vendor due-diligence questionnaires; and collect and organize vendor evidence.
Review vendor responses and assurance evidence against established checklists, flag gaps or exceptions, and perform exclusion screening and other risk intelligence checks under guidance.
Track vendor findings, remediation commitments and reassessment due dates, and refresh vendor risk dashboards.
Support compliance testing and resilience activities, including business impact analysis data collection, critical-process and dependency mapping, and continuity-plan updates and testing.
Maintain risk registers and prepare recurring risk, control and compliance reports and dashboards.
Draft sections of memos, reports and other deliverables using established templates.
Research regulatory guidance, industry standards and trends, and new legislation and requirements.
Use EY-approved AI and automation tools to improve the speed, accuracy and consistency of repeatable tasks.
Track progress and promptly raise risks or issues to the Senior Analyst and engagement leads.
At the Analyst level, review Associate Analysts’ work products and help onboard new team members.