Manager/Senior Manager, IT Risk & Assurance, Advisory, Canberra
IT Risk Assurance Manager/Senior Manager, Advisory, Canberra
- Be respected and valued for your experience
- Work with leading organisations and agencies across the government sector
- Gain hands on best practice experience
About the opportunity
As an IT Risk and Assurance Manager/Senior Manager, you will manage small-scale and participate in large-scale IT Risk and Assurance client engagements and internal projects. An important part of your role will be to actively establish, maintain and strengthen internal and external relationships, with a focus on government clients. You will also identify potential business opportunities for EY within existing engagements, and work closely with management in pursuing these. Similarly, you will actively contribute to the planning, delivery and quality of engagements. This will include proactive identification and communication of risks within engagements.
In line with EY commitment to quality, you will manage team members on engagements and monitor the quality of team deliverables. As an influential member of the team you will promote a positive learning culture and coach junior team members to contribute to their development.
About you
You will be a confident, client focused problem solver who thinks out of the square. You will also possess superior written and oral presentation skills.
In your role as an IT Risk Assurance Manager/Senior Manager you will:
- Participate in and manage IT Risk and Assurance engagements
- Work effectively as a team member, managing team members, sharing responsibility, providing support, maintaining communication and updating senior team members on progress
- Prepare reports and schedules for review that will be delivered to clients and other parties
- Develop and maintain productive working relationships with client personnel
- Build strong internal relationships within EY Advisory Services and with other services across the organization
- Conduct performance reviews and contribute to performance feedback for staff
- Contribute to people-related initiatives including recruiting and retaining IT Risk and Assurance professionals
- Maintain an educational program to continually develop personal skills of staff
- Work with the senior team members to develop the practice
- Understand and follow workplace policies and procedures
- Work closely with government clients
- Were looking for people with knowledge and experience in the following areas, and already have deep experience and technical competence in at least one:
IT Risk Management
o IT Risk Management Frameworks
o Risk assessment and profiling
o Experiences with the implementation and use of tools and enablers (e.g. eGRC)
o Robust understanding of program and project management practices and methodologies
o Project assurance/advisory services (e.g. pre- and post-implementation reviews)
IT Assurance
o IT audit in the context of a financial audit, and related regulations, auditing standards and guidelines
o Ability to address issues and present mitigation strategies, both in writing and verbally with IT and business stakeholders
o COBIT, internal control principles and related regulations
o Internal audit services with a specific focus on IT, Government and related industry standards
o Evaluation of design and operating effectiveness of application and infrastructure level IT controls such as Logical Access, Change Management and IT Operations
o Service Organisation Control reporting standards (e.g. ASAE3402)
o Understanding of business processes and related application controls ideally within Government
o Strong technical or security skills related to a broad range of applications, operating systems, databases or security tools
IT Security
o Security and Risk Standards - e.g. ISM, PSPF, ISO 27001-2, AS/NZS7799, A/NZS4360, AS/NZS 13335, COBIT
o Security technology, process, and people analysis, design, architecture, management, and reporting
o Identity and Access Management (IAM)
o Data Loss Prevention
o Security logical architecture
o Security tools - e.g. IPS/IDS, Firewalls, AV, SIEM, managed security services
o O/S security
o Network security
o Web application security
o Application source code assessments
Qualifications:
Requirements:
Australian Citizen (required to pass negative vet 1 security clearance if successful in gaining the position)
Demonstrated minimum 6 years track record with a "Big 4" audit firm, blue chip consulting or relevant Government experience such as ANAO
Previous experience consulting to Government would be an advantage
Strong academic record including a degree
Common IT frameworks, including COBIT, CMMi, ITIL, PSPF, ISM
Desirable certifications such as CISA, CISM, CA, CIA, PMP, PRINCE2
About what we'll provide you
Respect. Empowerment. Flexibility. Support. Responsibility. Challenges. Development. Opportunity.
How is this possible?
Because our people culture respects you as an individual; encourages you to seek out opportunities; and drives you to develop faster. No matter when you join, or for however long you stay, you will gain valuable experiences that will open doors for you, not just now, but throughout your entire professional career.
Interested?
To experience more, apply today and join a firm that is committed to building an inclusive culture that supports a diverse workforce, providing you with the exposure, development and networking opportunities to drive your career forward.
Want to get to know us better?
Visit www.ey.com/au/careers
Become a fan on Facebook: http://www.facebook.com/eycareers
Connect with us on Linked In: http://www.linkedin.com/company/ernst-and-young
Follow us on Twitter: http://www.twitter.com/EY_Australia
Watch us on YouTube: http://www.youtube.com/ernstandyoungglobal
The preferred applicant will be subject to employment screening by EY or by their external third party provider and will also be required to pass negative vet 1 security clearance.
Ernst Young refers to one or more of the member firms of Ernst Young Global Limited (EYG), a UK private company limited by guarantee. EYG is the principal governance entity of the global Ernst Young organization and does not provide any service to clients. Services are provided by EYG member firms. Each of EYG and its member firms is a separate legal entity and has no liability for another such entity's acts or omissions. Certain content on this site may have been prepared by one or more EYG member firms.
© 2013 Ernst Young, Australia. All Rights Reserved.
Leave a Reply
You must be logged in to post a comment.