Risk Consulting-Senior-IT-InfoSec Auditor at EY

, kerala, India -

Full Time

Start Date

Immediate

Expiry Date

27 Dec, 25

Salary

0.0

Posted On

28 Sep, 25

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Information Security Audits, IT Internal Audits, Operational Audits, IT General Controls, ERP Security, Control Reviews, Risk Management, Project Management, Communication Skills, Team Leadership, Stakeholder Management, ISO27001, CISA, CISM, CoBIT, ITIL V3

Industry

Professional Services

Description

At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. EY-Digital Risk - IT-InfoSec Auditor At EY, we’re all in to shape your future with confidence. Join EY and help to build a better working world. As part of our Risk Consulting, you will be joining the Digital Risk Consulting Team. As part of our Digital Risk team, you will be part of Audit team to perform Information Security assessments, IT Infrastructure, and IT Application control audit for various clients across the MENA region. Working with Digital Risk team, you will also perform IT/IS Risk assessment, IT/IS Governance, ERP reviews and conduct maturity assessment on the client’s current IT/IS posture. The client base spans across various sectors and includes collaboration with other teams within Advisory services. The opportunity We’re looking for Senior with expertise in IT/IS Audit. This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the growth of our service offering. Your key responsibilities Responsible for working with multiple client engagements and teams at a Senior level within the MENA region. You can expect to work with high level client personnel to address compliance, financial, and operational risks You are also expected to perform IT/InfoSec internal control testing, develop IT/InfoSec internal audit plans, and provide IT/InfoSec internal audit services for the MENA stakeholders. You will assess the client’s current state IT/InfoSec internal controls for the client's IT/InfoSec environment and identify IT/InfoSec risks and subsequent recommendations. Working with client personnel to analyse, evaluate and enhance information systems facilitating the business internal control process, and assisting clients and other technology professionals in performing information technology control audits, information technology control engagements, security audits and security engagements Skills and attributes for success Collaborating with other members of the engagement team to plan the engagement and develop work program timelines, risk assessments and other documents/templates. Able to manage Senior stakeholders in the IT/InfoSec internal audit domain. Experience in leading teams to execute IT/InfoSec audit/Risk Management within stipulated timeline along with high quality deliverables. Lead and execute IT/InfoSec internal audit engagements. Exposure to ITGC testing, IS audits SOC2 audits, ISMS and COBIT reviews Experience in performing IT reviews in FS sector is preferred. Good Communication skill and willingness to travel at a short notice Experience in applying relevant technical knowledge in at least one of the following engagements: Information Security audits and reviews. IT internal or operational audits and reviews IT General Controls audits and reviews ERP security and control reviews (Oracle, SAP, MS Dynamics) Demonstrating and applying strong project management skills, inspiring teamwork, and responsibility with engagement team members To qualify for the role, you must have A bachelor's or master's degree A minimum of 4-10 years of relevant years of experience working as Information security professional with IT/IS internal audit background in a professional services firm. Excellent communication skills with consulting experience preferred A valid passport for travel. Ideally, you’ll also have • A bachelor's or master's degree in B. TECH/B. E, MS, MBA in accounting or a related discipline. • ISO27001, ITSM, CoBIT, ITIL V3, CISA, CISM, CIA (anyone certification is desired) What working at EY offers At EY, we’re dedicated to helping our clients, from start–ups to Fortune 500 companies — and the work we do with them is as varied as they are. You get to work with inspiring and meaningful projects. Our focus is education and coaching alongside practical experience to ensure your personal development. We value our employees and you will be able to control your own development with an individual progression plan. You will quickly grow into a responsible role with challenging and stimulating assignments. Moreover, you will be part of an interdisciplinary environment that emphasizes high quality and knowledge exchange. Plus, we offer: Support, coaching and feedback from some of the most engaging colleagues around Opportunities to develop new skills and progress your career The freedom and flexibility to handle your role in a way that’s right for you EY | Building a better working world EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets. Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow. EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

How To Apply:

Incase you would like to apply to this job directly from the source, please click here

Responsibilities

You will be responsible for working with multiple client engagements and teams at a Senior level within the MENA region. This includes performing IT/InfoSec internal control testing, developing internal audit plans, and assessing clients' IT/InfoSec environments.