Government and Infrastructure-Service Delivery Center-Enterprise Risk. Senior Analyst

EY•San Antonio, TX

9d•$52,900 - $122,700

About The Position

The Senior Analyst is part of EY’s US-based Service Delivery Center Risk team, aligned to the Enterprise Risk, Controls & Resilience team within Government & Infrastructure. The team delivers repeatable, high-quality execution for government clients across internal controls, OMB Circular A-123, audit readiness, internal audit, enterprise risk, resilience, third-party risk and compliance programs. Work may include controls monitoring and testing, process and control documentation, evidence management, deficiency and corrective action plan tracking, vendor assessments, compliance assessments, resilience and continuity support, and recurring risk and compliance reporting. The Senior Analyst leads day-to-day execution for an SDC Risk delivery team. The role supervises Analysts’ work, coordinates with client-site engagement teams, escalates complex issues, and helps make delivery more repeatable and efficient. It also monitors delivery against service levels, schedules, scope and key performance indicators; maintains reporting and delivery records; and identifies process improvements and automation opportunities. The position requires a bachelor’s degree in a related field, at least three years of relevant experience including at least one year involving federal financial business processes, internal audit, risks and controls, and experience supervising or reviewing others’ work. Applicants must be US citizens able to obtain and maintain a public trust clearance or higher; some engagements require Secret clearance. Travel flexibility of up to 20% is required. The advertised base salary ranges from $52,900 to $122,700 depending on office location. EY describes a comprehensive compensation and benefits package, including medical and dental coverage, pension and 401(k) plans, and paid time off options.

Requirements

Bachelor’s degree in Accounting, Finance, Business, Economics or a related field.
At least 3 years of experience in accounting, audit, internal controls, OMB Circular A-123, audit readiness, enterprise risk, third-party or vendor risk, resilience or compliance.
At least 1 year of experience with federal financial business processes, internal audit, risks and controls.
Experience supervising or reviewing the work of others.
US citizenship and ability to obtain and maintain a public trust clearance or higher; some engagements require Secret clearance.
Strong communication, facilitation and presentation skills.
Ability to work confidently with a nationally distributed team and oversee and direct resources in a managed services environment.
Ability to manage teams to meet tight deadlines and follow up on open issues.
Excellent skills in MS Office (Word, Excel, PowerPoint and SharePoint), and ability to become proficient with Tableau or Power BI and Visio.
Flexibility to travel up to 20%.
Intellectual curiosity and professional skepticism.
Ability to produce high-quality work within expected timeframes and hold a team to the same standard.
Effective collaboration with individuals from varied backgrounds and skillsets.
Understanding of internal control concepts and frameworks, including the GAO Green Book, COSO and OMB Circular A-123, including control testing and risk and control self-assessment.
Ability to quickly understand complex financial business processes involving multiple stakeholders and information systems.
Knowledge of working paper documentation standards.
Working knowledge of third-party risk and business continuity practices, including vendor risk tiering, risk-based due diligence, SOC 1 and SOC 2 report review, ongoing monitoring and business impact analysis.
Knowledge of how to use firm-approved AI tools to improve problem-solving and productivity, with sound judgment about AI risks and considerations.
Ability to assess and articulate evolving AI risks to clients across risk domains, including AI embedded in vendor products and services.

Nice To Haves

Relevant certification such as CPA, CIA, CGFM, CDFM, CTPRP, CBCP or PMP.
Working knowledge of the US Standard General Ledger (USSGL) and Statements of Federal Financial Accounting Standards (SFFAS).
Prior experience in a service delivery center, shared services or managed services environment.
Hands-on experience with GRC platforms such as Archer, Optro (formerly AuditBoard) or ServiceNow.
Experience running high-volume vendor risk assessments on third-party risk management platforms such as ServiceNow Vendor Risk Management, Archer Third Party Governance, OneTrust or ProcessUnity.
Familiarity with state internal control and internal audit statutes, including Massachusetts Chapter 647, the New York State Governmental Accountability, Audit and Internal Control Act, Section 215.86 of Florida Statutes, the Texas Internal Auditing Act and the California State Leadership Accountability Act.
Lean Six Sigma training or similar process improvement experience.

Responsibilities

Supervise the quality and pace of Analysts’ documentation, testing, evidence management, vendor assessment and reporting work; assign work, review work products, and provide coaching and on-the-job training.
Translate engagement requirements into work plans, test procedures, sampling approaches, checklists and templates, and confirm acceptance criteria.
Develop control testing procedures and scripts in accordance with guidance such as OMB Circular A-123 and applicable state statutes, and oversee Analysts’ execution.
Run vendor risk assessment cycles, including confirming inherent risk tiers, assigning due diligence questionnaires, reviewing vendor responses and assurance evidence, and preparing draft risk ratings.
Oversee ongoing vendor monitoring, including reassessment scheduling, risk intelligence alerts, exclusion screening, contract compliance checks, and tracking issues, exceptions and remediation.
Coordinate resilience support, including business impact analysis data collection, critical process and dependency mapping, continuity plan updates, tabletop exercise logistics and recovery test documentation.
Manage documentation (PBC) and evidence processes across client process owners and resolve bottlenecks with engagement leads.
Perform quality assurance reviews of working papers and deliverables before release to client-site teams, and track rework trends.
Manage deficiency and corrective action plan tracking, perform root cause analysis, and prepare status and trend reporting.
Draft memos and reports explaining team findings and observations.
Serve as the escalation point for complex control, testing, vendor assessment and documentation questions.
Monitor delivery against SLAs, KPIs, scope and schedule; identify, communicate and address risks, assumptions, issues and constraints.
Prepare status reports and production metrics for engagement leads, and maintain deliverable trackers and repositories.
Assess whether work is meeting milestone deadlines and budget and whether work structure needs adjustment.
Identify process improvements and automation or AI opportunities; write standard operating procedures and maintain knowledge assets for repeatable delivery.
Identify additional service needs and raise them to client-site engagement leaders.
Develop relationships with stakeholders across EY functional groups and negotiate priorities across multiple teams.