Technology Risk (IT Audit) Senior Consultant - Government and Public Sector

at  EY

EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities. At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.
From strategy to execution, the Government & Public Sector (GPS) practice of Ernst & Young LLP provides a full range of consulting and audit services to help our Federal, State, Local and Education clients implement new ideas to help achieve their mission outcomes. We deliver real change and measurable results through our diverse, high-performing teams, quality work at the highest professional standards, operational know-how from across our global organization, and creative and bold ideas that drive innovation. We enable our government clients to achieve their mission of protecting the nation and serving the people; increasing public safety; improving healthcare for our military, veterans and citizens; delivering essential public services; and helping those in need. EY is ready to help our government build a better working world.

Some key capabilities you should be prepared to bring to client-facing and internal teams include:

• Demonstrate working knowledge and aptitude in our key capabilities including IT general and application controls, risk management, information security, and basic cybersecurity, and emerging technology (automation, AI)
• Take a practical approach to solving issues and gaining client agreement
• Collaborate among team members; promote an inclusive working environmen

YOUR KEY RESPONSIBILITIES

As a member of our Technology Risk (Business Consulting) team, you will serve as a key resource in delivering quality client services by understanding IT risk, protecting business performance, navigating digital transformation and complexity, and assessing strategies, initiatives, processes and issues around IT controls, cybersecurity, cloud, contractual compliance, and system management. You will assist in the testing of IT general and application controls, prepare for and potentially lead client meetings, establish relationships with client personnel at the appropriate levels, and deepen sector and client knowledge. You will provide direction and oversight of staff personnel and team objectives.

Some key capabilities you should be prepared to bring to client-facing and internal teams include:

• Demonstrate working knowledge and aptitude in our key capabilities including IT general and application controls, risk management, information security, and basic cybersecurity, and emerging technology (automation, AI)
• Take a practical approach to solving issues and gaining client agreement
• Collaborate among team members; promote an inclusive working environment

TO QUALIFY FOR THE ROLE, YOU MUST HAVE THE FOLLOWING

• Bachelor’s degree in Business, Accounting, Finance, Information Systems, Information Technology or closely related field
• 3+ years of relevant federal/government experience in information systems, information security, risk management, IT and application controls
• Experience with internal controls and leading standards (FISCAM, FISMA, NIST, CMMC, OMB A-123) and IT technologies (Windows, UNIX, Oracle, Mainframe, SAP)
• Experience preparing written or verbal materials, and presenting project results to clients
• Participated in relevant audit/control testing engagements such as CFO Act/FISCAM, OMB Circular A-123 internal control over financial reporting/Systems (ICOFR/ICOFS) assessments, audit readiness (DOD FIAR), SOC-1 Examinations (SSAE-18), and FISMA security reviews/implementations
• Possess an understanding of IT technical security controls (NIST 800 series requirements, DOD Security Technical Implementation Guides (STIGS)), FIPS guidance, and Federal IT audit/examination methodologies (GAO FISCAM, Financial Audit Manual (FAM), and NIST RMF Assessment and Authorization)
• Ability to obtain and maintain a Secret level security clearance
• One of the following professional certifications:
• CISA (Certified Information Systems Auditor)
• CPA (Certified Public Accountant)
• CGFM (Certified Government Financial Manager)
• CDFM (Certified Defense Financial Manager)
• Willingness to travel 20 – 30% or more. Due to the nature of our work in the Government and Public Sector, this work is required to be completed at client, EY and/or contractor sites. Our goal is to assign professionals to projects within a commutable distance of their work location office. In certain circumstances, travel may be required beyond your work location based on client and project needs.