Senior Associate, IT Auditor – Financial Services Assurance

About the role

EY’s Technology Risk team is looking for a Senior Associate to lead and execute technology audits for regulated financial services clients. You will work on MAS‑mandated reviews, SOC 1/2 attestations and ISO 27001 assessments, helping banks, insurers and asset managers demonstrate robust cyber and technology controls.

Key responsibilities

• Audit client environments against MAS Technology Risk Management (TRM) Guidelines, MAS Notices and other regulatory expectations.
• Plan, scope and run IT reviews, evaluating both design adequacy and operating effectiveness of controls.
• Assess emerging risk areas such as AI, cloud services, third‑party outsourcing, data governance, cyber resilience and business continuity.
• Prepare clear, evidence‑based findings and practical recommendations, and present them to senior client stakeholders.
• Own engagement delivery, managing scope, budget and timelines while coaching junior associates.
• Stay up‑to‑date with regulatory changes and new technology risks.

Required profile

• 3–6 years of experience in technology audit, IT risk or technology assurance, preferably within a professional services firm or a regulated financial institution.
• Hands‑on experience delivering regulatory or framework‑based audits (MAS TRM, SOC 1/2, ISO 27001).
• Degree in Information Systems, Computer Science, Engineering, Cybersecurity or a related field, or equivalent practical experience.
• Strong written and verbal communication skills, able to translate technical findings for business audiences.

Required skills

• Knowledge of MAS TRM Guidelines and related Notices.
• Experience with SOC 1, SOC 2 and ISO 27001 audit frameworks.
• Familiarity with cloud platforms such as AWS and Azure.
• Understanding of AI, data governance, cyber resilience, and business continuity risk areas.
• Exposure to NIST CSF, COBIT or ITIL frameworks (nice to have).