E

Ernst & Young

Global professional services: consulting, assurance, tax

Manager – Technology Risk

Security Governance, Risk & ComplianceUpdated on Nov 14
Full-timeToronto, ON, CanadaIn-person

About the Job

Requirements

  • A bachelor's degree or higher in Business Administration, Commerce, Computer Science, Management Information Systems, or another relevant program is required.
  • A minimum of 5 years of direct operational IT risk experience or technical knowledge of IT-related assessments or audits, such as Internal Controls for Financial Reporting, SOX, or SOC reporting, is required.
  • A relevant professional designation such as CISA, CPA, CIA, CISSP, or CISM, or eligibility to obtain one, is required.
  • Comprehensive knowledge of internal auditing standards and techniques is required.
  • Proficiency using Microsoft Office Suite, including Excel, Word, OneNote, and PowerPoint, is required.
  • Demonstrated knowledge of ERP platforms such as SAP or Oracle is an asset.
  • The role requires strong experience interacting with clients at all levels, including staff, leadership, and partners.
  • The role requires the ability to coach and mentor junior staff on engagements.

Responsibilities

  • Oversee external audit engagements testing and opining on the efficacy of IT general controls and IT application controls to support financial statement and integrated audits.
  • Assist clients in designing and implementing IT general controls and IT application controls for SOX compliance, test their efficacy, and lead internal audit or assessment engagements evaluating alignment with cybersecurity practices such as NIST CSF and ISO 27001.
  • Lead service organization reporting, with a focus on issuing third-party reports such as 3416, SOC 1, and SOC 2 reports.
  • Manage internal and external audit engagements and projects day to day, and identify opportunities to improve EY's service offerings.
  • Lead and support on-site client coordination, including planning, briefing the team on the client's IT environment and industry IT trends, communicating with clients, and completing audit engagements.
  • Maintain relationships with client management and manage expectations regarding work products, timing, and value delivered.
  • Prepare IT reports on the adequacy and effectiveness of control structures and provide practical recommendations to improve control or process effectiveness and efficiency.
  • Discuss and resolve audit issues and recommendations with client management.
  • Apply an understanding of complex information systems to client situations.
  • Lead and support senior consultants and consultants, including delivering formal IT audit training.
  • Maintain long-term client relationships and networks, and cultivate business development opportunities.
  • Support the growth and delivery of the Technology Risk practice by identifying client needs, developing technology risk and controls solutions, and collaborating with Assurance and other EY teams on evolving reporting requirements.
  • Manage engagement quality, economics, timelines, and risks, ensuring deliverables align with EY methodology and client expectations.
  • Build trusted relationships with client executives and key stakeholders, providing practical insights on technology risks, control gaps, and remediation priorities.
  • Identify and develop new business opportunities by connecting client needs with EY's assurance, technology risk, and consulting capabilities.
  • Coach and develop senior and staff colleagues through delegation, timely feedback, technical guidance, and on-the-job learning.
  • Contribute to the Technology Risk practice through innovation, market-facing initiatives, methodology development, and adoption of data- and AI-enabled approaches.

Desired Qualifications

  • Big Four or IT risk consulting experience is an asset.

About the Company

Ernst & Young

Global professional services: consulting, assurance, tax

EY (Ernst & Young) provides professional services at a global scale, offering consulting, assurance, tax, and transaction advisory services. It serves clients across industries such as technology, media, real estate, hospitality, and construction. Instead of selling a single product, EY works with clients through tailored engagements where cross-disciplinary teams analyze challenges, design strategies, perform audits, help with tax planning, and assist with mergers or divestitures. What sets EY apart is its worldwide reach and integrated service model, industry-specific expertise, and focus on responsible business practices like sustainability, cybersecurity, and workforce flexibility. EY’s goal is to help organizations improve performance, manage risk, and achieve sustainable growth while building a better working world.

Company size
5,001-10,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Boston, MA
Founded
1991

Recently Posted Jobs

Explore more opportunities at Ernst & Young

See more jobs