Government and Infrastructure - Assurance - Technology Risk- Senior- TS SCI Clearance Required
About The Position
EY’s Government and Infrastructure practice provides consulting and audit services to federal, state, local, and education clients. The practice advises U.S. federal agencies on performance improvement, program effectiveness, audit and audit readiness, financial management, and technology risk, with work spanning defense and national security, civilian, health, and international agencies. As a member of the Technology Risk (IT Audit) team, you will help deliver client services for financial statement audits, attestation engagements, and IT control projects. The role includes researching issues, assisting with testing IT general and application controls, preparing for and potentially leading client meetings, building relationships with client personnel, and developing sector and client knowledge. The position requires an active Top Secret SCI clearance. Candidates must be comfortable working in person or onsite as needed; travel may be required based on client and project needs.
Requirements
- Bachelor’s degree in Business, Accounting, Finance, Information Systems, Information Technology, or a closely related field.
- Active Top Secret SCI clearance.
- At least 3 years of relevant experience in information assurance, information security, risk management, IT and application controls, leading standards such as COSO, ERM, FISCAM, FISMA, and NIST, IT technologies such as Windows, UNIX, Oracle, Mainframe, and SAP, preparing written or verbal materials, and assisting with presenting project results to clients.
- Participation in relevant audit or control-testing engagements, such as CFO Act/FISCAM, OMB Circular A-123 ICOFR/ICOFS assessments, DOD FIAR audit readiness, ATC-320 SOC-1 Examinations (SSAE-18), or FISMA security reviews or implementations.
- Understanding of IT technical security controls, including NIST 800 series requirements and DOD Security Technical Implementation Guides (STIGs), FIPS guidance, and federal IT audit or examination methodologies such as GAO FISCAM, the Financial Audit Manual (FAM), and NIST RMF Assessment and Authorization.
- Experience completing control testing over financial system controls compliance, IT general and application controls, and information assurance controls in areas including access control, change control, segregation of duties, and disaster recovery.
- Comfort working in person or onsite as needed.
Nice To Haves
- Experience working on large, complex engagements within Government and Infrastructure.
- Experience at a Big Four firm, global management consulting firm, or blue-chip company, preferably with a Government and Infrastructure focus.
- Strong analytical and problem-solving skills.
- Ability to collaborate with clients and identify follow-on engagement opportunities.
- Excellent verbal and written communication skills.
- Certified Information Systems Auditor (CISA) certification.
- Certified Information Systems Security Professional (CISSP) certification.
- For federal practice roles, flexibility to travel up to approximately 30% is preferred; for state, local, and education practice roles, flexibility to travel up to approximately 80% is preferred.
Responsibilities
- Deliver quality client services on financial statement audits, attestation engagements, and IT control projects.
- Conduct research as needed.
- Assist in testing IT general and application controls.
- Prepare for and potentially lead client meetings.
- Establish relationships with client personnel at appropriate levels.
- Deepen sector and client knowledge.
- Apply knowledge of IT general and application controls, risk management, information security, and information assurance.
- Take a practical approach to resolving issues and gaining client agreement.
- Collaborate with team members and promote an inclusive working environment.
Benefits
- Medical and dental coverage.
- Pension and 401(k) plans.
- Paid time off options, including flexible vacation, designated paid holidays, winter and summer breaks, personal/family care, and other leaves of absence.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
