Government and Infrastructure - Assurance - Technology Risk- Manager - TS SCI Clearance Required

EY•McLean, VA

2d•$111,600 - $232,700

About The Position

EY is hiring a Manager for its Government and Infrastructure Assurance Technology Risk (IT Audit) team. The role serves U.S. federal agencies and delivers client services for financial statement audits, attestation engagements, and IT control projects. The manager conducts research, tests IT general and application controls, prepares for and may lead client meetings, builds relationships with client personnel, and develops sector and client knowledge. The work includes overseeing audit and control testing across financial-system compliance, IT controls, and information assurance, and may take place at client, EY, or contractor sites. Travel of 20–30% or more may be required. Applicants must be able to obtain and maintain a Secret-level clearance or higher.

Requirements

Bachelor's degree in Business, Accounting, Finance, Information Systems, Information Technology, or a closely related field.
At least 5 years of relevant experience in information assurance, information security, risk management, applicable standards, IT technologies, and preparing or presenting project materials.
Experience with leading standards such as COSO, ERM, FISCAM, FISMA, or NIST, and technologies such as Windows, UNIX, Oracle, Mainframe, or SAP.
Experience participating in planning through reporting phases and overseeing audit/control testing engagements, such as CFO Act/FISCAM, OMB Circular A-123 ICOFR/ICOFS, DOD FIAR audit readiness, ATC-320 SOC-1 examinations (SSAE-18), FISMA implementations, or OIG FISMA reviews based on DHS cyberscope metrics.
Strong understanding of IT technical security controls, including NIST 800 series requirements, DOD Security Technical Implementation Guides (STIGs), FIPS guidance, and federal IT audit/examination methodologies such as GAO FISCAM, the Financial Audit Manual, and NIST RMF Assessment and Authorization.
Must be able to obtain and maintain a Secret-level clearance or higher.
Willingness to travel 20–30% or more.

Nice To Haves

Experience executing project plans on large, complex engagements from analysis through implementation.
Experience working at a Big Four firm, global management consulting firm, or blue-chip company, preferably with a Government and Infrastructure focus.
Strong analytical and problem-solving skills.
Ability to collaborate with clients and identify engagement follow-on opportunities.
Certified Information Systems Auditor (CISA) certification.
Certified Information Systems Security Professional (CISSP) certification.

Responsibilities

Deliver quality client services on financial statement audits, attestation engagements, and IT control projects.
Conduct research and assist in testing IT general and application controls.
Prepare for and potentially lead client meetings.
Establish relationships with client personnel at appropriate levels and deepen sector and client knowledge.
Participate in planning through reporting phases and oversee execution of audit and control testing engagements.
Oversee and complete testing of financial system controls compliance, IT general and application controls, and information assurance controls, including access control, change control, segregation of duties, and disaster recovery.
Apply practical problem-solving, collaborate with team members, and promote an inclusive working environment.
Present project results to clients and assist in preparing written or verbal materials.