Consultant/Senior Consultant – IT Risk and Assurance (Core & FSO)
Do you have the vision to see through problems? Then join EY and gain experiences that will last a lifetime.
As part of our IT risk and assurance team, you'll focus on client opportunities where your expertise can make a substantial impact. You'll apply your knowledge and experience to shape our services and motivate your team. You'll build valuable relationships with clients and develop strong capabilities, through both formal training and working with senior mentors and talented colleagues.
All of our ITRA services, whether assurance or advisory, are designed for the dual purpose of strengthening internal controls and helping to improve IT and business performance. Our IT risk advisory services focus on IT governance and effectiveness, IT and Information Risk Advisory, Privacy and Information Security, security and controls of ERP implementations, in addition to assurance-related engagements such as third party reporting and financial audit IT integration.
Ideally you'll have experience with a globally recognised professional services firm or large corporations with industry experience in four or more of the following areas:
- IT Risk Management Internal Control - particularly in the context of financial reporting risk, Sarbanes-Oxley legislation, operational risk and relationships to business risk.
- IT Risk and security frameworks and common standards (e.g., AS/NZS 4360, CoBIT, ITIL, ISO 27001/02, IRAP, PSPF, PCI-DSS).
- Privacy, data protection and Information Security concepts.
- IT Internal Audit - in the planning, delivery and management of IT internal audits.
- Knowledge of business process and internal controls within core financial and business processes such as procurement through pay, order through cash, finance, and payroll and the use of complex ERPs such as SAP to manage these processes.
- Exposure to Governance Risk and Control solutions such as SAP GRC, Archer, Open Pages
- UNIX security.
- Microsoft Windows/Active Directory security
- Network security: firewalls/routers/switches/VLANs
- Wireless security
- Security testing of web-based applications
- Application security source code assessments
- Systems security skills in assessment, design, architecture, management and reporting
To Qualify Applicants must have:
- Experience in having applied relevant technical knowledge in at least one of the following engagements: (a) financial statement audits; (b) internal or operational audits; (c) SAS 70/ ISAE/ASAE3402/ SSAE16 engagements; (c) Privacy Impact Assessments/ IT Security assessments and/or (d) ERP security and controls reviews (Oracle, SAP, and PeopleSoft).
- Strong project management skills.
- Advanced written and verbal communication skills and presentation skills.
- Excellent leadership, teamwork and client service skills.
- Demonstrated integrity within a professional environment.
You'll also have a Bachelor's and/or post graduate degree in computer science, information systems, engineering, or a related major (such as accounting). The successful candidate must hold or be willing to pursue related professional certifications such as the CISSP, CISM, and/or CISA.
Our success is built on the drive and commitment of our people. We'll provide opportunities that challenge, stimulate and develop - all in an environment underpinned by integrity and teamwork. We'll help you develop the skills you need to be successful. At Ernst Young you'll be part of a world in which you will discover what it is like to perform at your best.
Qualifications:
The preferred applicant will be subject to employment screening by Ernst Young or by their external third party provider.
Ernst Young refers to one or more of the member firms of Ernst Young Global Limited (EYG), a UK private company limited by guarantee. EYG is the principal governance entity of the global Ernst Young organization and does not provide any service to clients. Services are provided by EYG member firms. Each of EYG and its member firms is a separate legal entity and has no liability for another such entity's acts or omissions. Certain content on this site may have been prepared by one or more EYG member firms.
© 2013 Ernst Young, Australia. All Rights Reserved.
Leave a Reply
You must be logged in to post a comment.