FSO-Con-Risk Con-IT Ctrl Adv-Digi Risk-IT Int Audit and IT SOX - Mgr - Multiple Positions - 1758122

EY•Dallas, TX

3d•Hybrid

About The Position

Ernst & Young U.S. LLP is hiring a Manager for its FSO Consulting, Risk Consulting, IT Controls Advisory, Digital Risk, IT Internal Audit & IT SOX practice in Dallas, Texas. The role provides end-to-end SOX audit guidance and performs IT audit procedures, including work on complex, judgmental, and specialized issues. It uses data analytics to assess large datasets, identify anomalies, and detect potential risks, applying internal audit methodologies and knowledge of IT controls, regulatory matters, privacy, and security. Audit procedures include risk-based auditing, SOX testing, process mapping, walkthroughs, sampling, root-cause analysis, inquiry, inspection, observation, and reperformance. The Manager applies knowledge of IT environments and the financial services industry to monitor technology trends and identify engagement and client-service issues. This includes monitoring project performance, reviewing audit results, analyzing client processes and controls, tracking milestones, and evaluating risks to objectives, timelines, budgets, and quality. Projects may involve Internal Audit and SOX transformations, IT risk assessments, and assessments of IT control design and implementation for complex systems, infrastructure, and risk issues. The role manages and motivates diverse professional teams, including planning and assigning work, making hiring and firing recommendations, and reviewing junior employees’ work. The Manager collaborates with engagement teams to plan engagements and develop work programs and execution enablers, including approaches, tasks, timelines, and budgets. They direct project teams, monitor delivery against scope, timelines, and budgets, review deliverables, escalate risks and issues, and ensure compliance with internal audit and SOX methodologies and quality standards. This is full-time employment, Monday through Friday, 40–45 hours per week, from 8:30 a.m. to 5:30 p.m. The position requires domestic and regional travel of up to 50% to serve client needs. EY uses a hybrid model, with most client-serving employees expected to work together in person 40–60% of the time over the course of an engagement, project, or year.

Requirements

Bachelor’s degree in Computer Science, Information Systems, Business, Finance, Accounting, Engineering, or a related field and 5 years of progressive, post-baccalaureate related work experience; alternatively, a master’s degree in one of those fields and 4 years of related work experience.
At least 4 years of experience working as an IT auditor or IT risk advisor for a public accounting firm, professional services firm, or financial services company.
At least 4 years of experience leading IT internal audit, external audit, service organization control reporting, or IT internal controls engagements and assisting with business development activities within financial services.
At least 4 years of experience with internal audit risk assessments, SOX or internal controls, and tools and enablers within financial services.
At least 4 years of experience analyzing and evaluating companies’ complex IT systems, infrastructure, and risk issues, including ensuring execution of the audit plan and preparing audit reports.
At least 4 years of experience communicating technical information verbally and in writing.
At least 2 years of experience presenting technical information to C-level executives.
At least 1 year of experience managing a team of at least four employees and managing subordinates’ performance reviews.
Must have or be eligible to obtain within one year of the start date one of the following certifications: CA, CGEIT, CIA, CISA, CISM, CISSP, CMA, CPA, CBCP, CFE, or CRISC.
Must be a United States worker as defined by U.S. Department of Labor regulations.
Employer will accept any suitable combination of education, training, or experience.

Responsibilities

Provide end-to-end SOX audit guidance and perform IT audit procedures, including work on complex, judgmental, or specialized issues.
Use data analytics tools to assess large datasets, identify anomalies, and detect potential risks.
Apply internal audit approaches and methodologies, IT controls knowledge, regulatory, privacy, and security skills, and audit procedures such as risk-based auditing, SOX testing, process mapping, walkthroughs, sampling, root-cause analysis, inquiry, inspection, observation, and reperformance.
Monitor IT trends and identify engagement and client-service issues using knowledge of current IT environments and the financial services industry.
Monitor project performance, review audit results, analyze client processes and controls, assess milestones, and evaluate risks to engagement objectives, timelines, budgets, and quality standards.
Manage and motivate teams, plan and assign work, make hiring and firing recommendations, and review junior employees’ work.
Collaborate with engagement team members to plan engagements and develop work programs and execution enablers, including approach, tasks, timelines, and budgets.
Direct project teams; monitor progress against scope, timelines, and budgets; review deliverables; escalate risks and issues; and ensure adherence to internal audit and SOX methodologies and quality standards.
Lead or contribute to projects that may include Internal Audit and SOX transformations, IT risk assessments, and IT control design and implementation assessments.