Consultant - Assurance - TMT - ASU - TR - Technology Risk - Mumbai
EY · Mumbai, Maharashtra, India
- On site
- Full-time
- ₹1,200,000 / year
- Mumbai, Maharashtra, India
Job highlights
- Assess IT General and Application Controls.
- Evaluate Information Produced by Entity (IPE).
- Conduct SOC 1 and SOC 2 reporting.
- Manage technology risks and provide insights.
- Requires Computer Science degree and backend experience.
About the role
About EY
As a global leader in assurance, tax, transaction and advisory services, EY hires and develops passionate people to build a better working world. We foster a culture of training, opportunities, and creative freedom, focusing on your professional growth and career development. At EY, your career is yours to build, with limitless potential and motivating experiences.The Opportunity: Technology Risk Consultant
The TMT (Technology, Media & Entertainment, and Telecommunications) industry is rapidly evolving, presenting both opportunities and challenges for organizations. EY helps TMT companies enhance customer experiences, achieve operational excellence, protect data and brand, and pursue M&A strategies to become leaders in the technology revolution.ASU - TR - Technology Risk Role
Assurance's purpose at EY is to inspire confidence and trust in a complex world by protecting the public interest, promoting transparency, supporting investor confidence, and nurturing future business leaders. We assist clients by ensuring audit compliance, providing clear perspectives to audit committees, and delivering critical information to stakeholders. Our service offerings include External Audit, Financial Accounting Advisory Services (FAAS), IFRS & US GAAP conversion, IPO and public offering support, and Corporate Treasury services.Your Key Responsibilities: Technical Excellence
- Proficiently perform IT General Controls (ITGC) and IT Application Controls (ITAC) assessments for ERP systems and infrastructure.
- Experienced in evaluating Information Produced by Entity (IPE) for data integrity and reporting reliability.
- Conduct SOC 1 and SOC 2 reporting to assess service organization controls and ensure compliance.
- Strong understanding of risk management frameworks to identify and mitigate technology risks.
- Provide insights and recommendations based on risk assessments to enhance technology risk posture.
Skills And Attributes
To qualify for this role, you must possess:- A Bachelor of Technology in Computer Science.
- Minimum of 3 years of experience in Backend Development.
What We Look For
We seek individuals who can collaborate effectively across client departments, adhere to commercial and legal requirements, and possess a practical approach to solving complex problems with insightful solutions. Ideal candidates are agile, curious, mindful, adaptable, and creative, maintaining positive energy.What We Offer
EY offers a market-leading, attractive employer brand with strong growth. You will work alongside market leaders and innovators. EY invests heavily in employee skills and learning, providing a personalized career journey and resources to support your role, skills, and opportunities. We are committed to inclusivity and achieving a balance that enables excellent client service, career growth, and wellbeing.If you meet the criteria, apply now to join us in shaping the future with confidence.Skills & topics
- Technology Risk
- IT Audit
- ITGC
- ITAC
- SOC 1
- SOC 2
- Risk Management
- Assurance
- TMT
- EY
- Consultant
- Backend Development
- Computer Science
- Mumbai
How to get hired
- Tailor your resume: Highlight your Bachelor of Technology in Computer Science and 3+ years of backend development experience, along with ITGC, ITAC, IPE, SOC 1/2, and risk management expertise.
- Showcase problem-solving: Emphasize your practical approach to complex issues and ability to deliver insightful, practical solutions in your application.
- Demonstrate collaboration: Provide examples of working effectively across departments and adhering to commercial/legal requirements in your experience.
- Prepare for interviews: Be ready to discuss your understanding of risk management frameworks and how you identify and mitigate technology risks.
- Research EY's values: Align your responses with EY's focus on a better working world, client service, and professional development.
Technical preparation
Master ITGC and ITAC frameworks.,Understand SOC 1 and SOC 2 reporting.,Practice ERP system control assessments.,Develop risk mitigation strategy skills.
Behavioral questions
Describe a complex technical problem you solved.,How do you ensure data integrity in reporting?,Explain your approach to risk assessment.,How do you collaborate with different teams?
Frequently asked questions
- What specific backend development experience is most relevant for the Technology Risk Consultant role at EY Mumbai?
- For the Technology Risk Consultant position at EY Mumbai, backend development experience is valuable, particularly if it involves working with standard ERP systems and their supporting infrastructure. Demonstrating experience with technologies relevant to data integrity, system controls, and reporting will strengthen your application.
- How does EY's Technology Risk practice support TMT companies?
- EY's Technology Risk practice assists TMT companies by ensuring their systems and processes comply with industry standards, protecting their data and reputation. We help them navigate the complexities of industry convergence, enhance operational excellence, and achieve strategic growth through robust risk management and advisory services.
- What are ITGC and ITAC assessments, and why are they important for this role?
- ITGC (IT General Controls) assessments review the controls over a client's IT environment, such as user access and change management. ITAC (IT Application Controls) focus on controls within specific applications, like data input and processing. Proficiency in these assessments is crucial for evaluating a client's technology risk posture and ensuring the reliability of their financial reporting.
- What is the significance of SOC 1 and SOC 2 reporting in this Technology Risk Consultant position?
- SOC 1 and SOC 2 reporting are vital for this role as they involve assessing the controls at service organizations. SOC 1 focuses on controls relevant to a client's financial reporting, while SOC 2 addresses controls related to security, availability, processing integrity, confidentiality, and privacy. Your ability to conduct these reports demonstrates expertise in evaluating third-party risk.
- What kind of career growth can I expect as a Technology Risk Consultant at EY?
- EY offers a personalized career journey with extensive training, opportunities, and resources to help you grow. As a Technology Risk Consultant, you can develop expertise in IT risk, audit standards, and various technologies, progressing into more senior roles within Assurance or other service lines, contributing to a better working world.
- Does EY Mumbai require specific certifications for the Technology Risk Consultant role?
- While a Bachelor of Technology in Computer Science is a mandatory qualification, specific certifications like CISA (Certified Information Systems Auditor) or CRISC (Certified in Risk and Information Systems Control) are highly beneficial for a Technology Risk Consultant role. They can significantly strengthen your profile and demonstrate your commitment to the field.