Senior Consultant (IT Internal Audit) - Risk Consulting

About the role

EY is hiring a Senior Consultant for its IT Internal Audit team within Risk Consulting in Singapore. You will guide and share knowledge with team members and take part in performing procedures, especially on complex, judgmental and specialised issues. You will work with the team and the client to plan engagements and build strategies that comply with professional standards and address the risks involved.

Key responsibilities

• Brief the engagement team on the client's IT environment and industry IT trends
• Maintain relationships with client management and stakeholders to manage expectations of service, work products, timing and deliverables
• Apply a thorough understanding of complex information systems to client situations
• Use knowledge of the client's business and industry to spot technological developments and their impact
• Manage the engagement budget, timeline and quality of deliverables
• Write clear, concise and objective audit reports covering objectives, scope, findings, risk implications, root causes and recommendations
• Present and discuss findings and recommendations with client management
• Assess what EY can deliver to serve clients

Required profile

• Bachelor's degree in Accounting, Business, Information Technology or a related discipline
• 3 to 5 years of relevant experience in IT audit, IT risk, cybersecurity, technology risk or related advisory services
• At least 2 years as an IT Auditor or IT Risk Consultant in a public accounting firm, professional services firm or industry environment
• Valid CISA certification is mandatory
• Willingness to travel when required
• Ideally, additional certifications such as CPA, CA, CISSP, CISM, CBCP, CIA, CIPP, CGEIT or equivalent

Required skills

• IT general controls, infrastructure and application controls reviews
• Cybersecurity assessments, ERP security (e.g. SAP, Oracle, Workday) and cloud security reviews
• Data protection and privacy reviews
• Business process audits using tools such as Power BI, Python, ACL, IDEA, SQL, Spotfire or Tableau
• Business continuity, IT governance, control frameworks and IT risk assessments
• Project management, stakeholder management, writing and presentation skills