Manager- Technology Risk- Assurance
- Toronto, ON
- Permanent
- Full-time
- External audits: Oversee engagements to test and opine on efficacy of IT general controls (ITGCs) and IT application controls (ITACs) to support financial statement audits / integrated audits (Internal Controls for Financial Reporting)
- Internal audits/SOX compliance testing: assist clients in designing and implementing ITGCs and ITACs to support SOX compliance. Assist testing of ITGCs and
- ITACs to confirm efficacy of controls. Lead internal audit / assessment engagements for clients to help confirm alignment with leading cybersecurity practices (NIST CSF, ISO 27001, etc.)
- Service organization reporting - Focus on the issuance of third-party reports in the form of 3416 reports, SOC 1, SOC 2 reports, etc.
- Provide high quality professional day-to-day management of internal/external audit engagements/projects and understand EY's practices and broader service offerings and identify potential opportunities to improve such service offerings
- Lead and support on-site coordination role for clients including planning, briefing team on the client's IT environment and industry IT trends, communicating with the clients and completing audit engagements
- Maintain relationships with client management to manage expectations of service, including work products, timing, and the value to be delivered.
- Prepare IT reports on the adequacy and effectiveness of control structure, along with practical recommendations to improve the effectiveness, efficiency of a control or process.
- Able to discuss and resolve audit issues and recommendations with client management.
- Demonstrate a thorough understanding of complex information systems and apply it to client situations
- Lead and provide relevant support to the teams of senior consultants and consultants, including delivering formal IT Audit related trainings.
- Maintain long-term client relationships and networks as well as cultivate business development opportunities.
- Highly professional with ability to work in challenging, diverse and evolving client environments
- Flexible with the ability to learn quickly and leverage skills in new situations
- Excellent verbal and written communication skills
- The ability to build strong client relationships
- Strong team working skills are essential
- Strong presentation and facilitation skills
- A passion to contribute to the growth of the practice
- Strong experience interacting with clients at all levels including Staff, Leadership and Partners Strong written, communication, and presentation skills.
- Ability to coach and mentor junior staff on engagements.
- Bachelor's Degree (or higher) in Business Administration, Commerce, Computer Science, Management Information Systems, or other relevant program required.
- A minimum of 5 years of direct operational IT risk experience or technical knowledge of IT-related assessments or audits (e.g., Internal Controls for Financial
- Reporting, SOX, SOC reporting)
- Relevant professional designation, such as CISA, CPA, CIA, CISSP, CISM, or eligible to obtain relevant designation
- Comprehensive knowledge of internal auditing standards and techniques;
- Strong analytical, interpersonal and communication skills;
- Demonstrated consistency in values, principles and work ethic;
- Proficiency using MS Office Suite including Excel, Word, OneNote and PowerPoint
- Demonstrated integrity, values, principles, and work ethic
- Big 4 / IT risk consulting experience will be considered an asset
- Demonstrated knowledge of ERP platforms such as SAP, Oracle, etc. would be an asset
- Support and coaching from some of the most engaging colleagues in the industry
- Learning opportunities to develop new skills and progress your career
- The freedom and flexibility to handle your role in a way that's right for you
- Toronto: $100,000 to $140,000