Senior Manager Technology Risk

Senior Manager Technology Risk at EY

At EY, you’ll join a globally connected powerhouse of diverse teams, shaping your future with confidence and taking your career wherever you want it to go. This role offers the opportunity to contribute to building a better working world, embodying the Māori proverb: "Nāu te rourou, nāku te rourou, ka ora ai te iwi" (With your contribution and my contribution, together we will thrive).

The Opportunity

As a Senior Manager Technology Risk, you will oversee a portfolio of client engagements, leading Technology Risk professionals in delivering information technology control engagements. Your role involves identifying opportunities for innovation and continuous improvement to ensure valuable outcomes for clients. You will build and leverage trusted relationships across diverse industries, helping clients establish trust and confidence in EY’s services.

This is a hybrid role based in Tāmaki Makaurau (Auckland).

Skills and Attributes for Success

To succeed in this role, you must demonstrate the following skills and experience:

• Lead the execution of audits/assessments of IT processes against leading practice IT risk and security frameworks and common standards (e.g., CoBIT, ITIL, ISO 27001, Sarbanes Oxley Act).
• Manage teams to deliver IT Assurance/Audit engagements, including evaluating the design and operating effectiveness of IT controls (e.g., application & IT general controls) to support external financial reporting requirements.
• Manage teams to deliver other assurance engagements such as SOC 1, SOC 2, SOC 3, agreed upon procedures, and reasonable and limited assurance engagements.
• Establish audit objectives, and design and test according to audit methodologies, processes, and audit report criteria.
• Conduct audits of clients’ accounting systems and key business applications.
• Evaluate the effectiveness of IT and relevant business/operational processes, activities, policies, and systems.
• Partner with internal and external teams to address compliance, financial, and operational risk, assessing current state internal controls and frameworks to mitigate current and emerging risks.
• Report on the existence and effectiveness of internal controls, presenting findings to Senior Management and Audit Committees.
• Apply a thorough understanding of complex information systems (e.g., operating systems, databases, ERP, Data Warehouse, SaaS etc.).

Ideally, candidates will also possess:

• A Bachelor or Master’s degree in IT or a related discipline; finance, business, or accounting qualifications are also considered.
• Professional accreditations such as CPA, CISA, CA, CIA, CISM, CISSP, CBCP, CIPP.
• Experience in Audit engagements including External IT Audits, IT General Controls, SOC1, SOC2, SOC3, SOX, GS007 or ASAE Audits.
• Experience leading and managing Line 1 and Line 2 technology risk governance roles, especially in Financial Institutions.
• A passion for emerging technologies and advising clients on managing IT risks and accelerating performance.

What We Offer You at EY

EY fuels your talents in a diverse and inclusive culture with globally connected teams, offering:

• Career Development: Shape your career with future-focused skills and world-class experiences.
• Flexible Work Arrangements: Policies empowering balance between professional and personal life, fostering trust and autonomy.
• Comprehensive Benefits Package: Includes a yearly wellness incentive, access to 8 weeks of additional flex leave, and family-friendly policies like 26 weeks of gender-neutral paid parental leave.
• Competitive Salary: Open to negotiation based on skills and experience.

EY is committed to Diversity, Equity, and Inclusiveness, encouraging applications from all backgrounds and providing an equitable and barrier-free recruitment experience. Support and adjustments can be requested by contacting contactrecruitment@au.ey.com.

Are you ready to shape your future with confidence? Apply today!

Key skills/competency

• Technology Risk Management
• IT Audit & Assurance
• Information Security Frameworks
• IT General Controls (ITGC)
• SOC Reports (SOC 1, 2, 3)
• Sarbanes Oxley (SOX)
• Risk Assessment & Mitigation
• Client Relationship Management
• Complex Information Systems
• Team Leadership