Risk Consulting-Digital Risk-Manager-Tech and Cyber Audit

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. 

EY – Risk Consulting – Manager - Tech & Cyber Audit

As part of Risk Consulting, you will lead and support client engagements focused on Tecnology and Cybersecurity audits across the MENA region. You will work with banks, regulators, financial institutions and clients across other regulated sectors to review IT and Cybersecurity practices/frameworks, operating models and remediation programmes.

The opportunity

We are seeking an experienced Manager – Tech & Cyber Audit to lead and execute technology audit, regulatory compliance, operational resilience, and technology risk management engagements within the financial services and other regulated sectors. The successful candidate will possess deep expertise in IT audit, cybersecurity, technology infrastructure, cloud risk, operational resilience, digital banking, payment systems, and regulatory frameworks applicable to banks and financial institutions.

This role will partner with senior management, regulators, internal audit, risk management, and technology teams to assess risks, evaluate controls, ensure regulatory adherence, and drive remediation of identified issues across complex technology environments. The position will be based in Kochi or Thiruvananthapuram, Kerala.

Your key responsibilities

Regulatory Compliance & Governance

• Lead regulatory compliance assessments against applicable banking, financial services, cybersecurity, operational resilience, and technology risk regulations.
• Perform regulatory gap assessments and compliance reviews across technology, cybersecurity, cloud, payment systems, data management, and third-party risk domains.
• Support regulatory examinations, inspections, and remediation programs.
• Track and validate remediation of regulatory findings, audit observations, and management action plans.
• Interpret new regulatory requirements and assess their impact on technology and business operations.
• Develop and maintain compliance monitoring and continuous assurance programs.

IT Audit & Assurance

• Lead risk-based IT audits covering: 
  • IT General Controls (ITGC)
  • Application Controls
  • Cybersecurity
  • Cloud Computing
  • Infrastructure & Operations
  • Data Management
  • Payments & Digital Banking
  • Third-Party Risk Management
  • Operational Resilience
  • DevSecOps and SDLC
• Conduct walkthroughs to understand business and technology processes, identify risks, and assess control effectiveness.
• Evaluate design and operating effectiveness of controls using established audit methodologies.
• Prepare and review audit planning documents, risk assessments, testing strategies, workpapers, and audit reports.
• Present audit observations and recommendations to senior management and stakeholders.
• Lead continuous auditing and continuous monitoring activities across critical technology environments.

Technology Risk Management

• Perform quantitative and qualitative technology risk assessments.
• Evaluate residual risks against organizational risk appetite.
• Assess effectiveness of risk mitigation strategies and compensating controls.
• Monitor and challenge technology risk issues and remediation activities.
• Support enterprise risk and operational resilience initiatives.

Operational Resilience & Cybersecurity

• Assess operational resilience capabilities including: 
  • Business Continuity Management
  • Disaster Recovery
  • Backup & Recovery Controls
  • Incident Management
  • Crisis Management
  • Technology Resilience
• Evaluate cybersecurity programs, security governance, access management, encryption controls, vulnerability management, and cloud security controls.
• Conduct reviews of digital banking, e-wallet, payment gateway, middleware, and critical banking applications.

Stakeholder & Team Leadership

• Manage audit teams and regulatory compliance professionals across multiple engagements.
• Coach, mentor, and develop team members.
• Coordinate with senior business, technology, risk, compliance, and audit stakeholders.
• Prepare executive-level reporting and present findings to governance committees and leadership teams.
• Drive engagement planning, resource management, budgeting, and delivery excellence.

To qualify for the role, you must have

• A bachelor’s degree in Technology, Finance, Accounting, or a related discipline.
• Nine to twelve years of relevant experience in IT and Cyber security audit and advisory experience
• Experience within banks, regulators, consulting firms or other financial institutions.
• Demonstrable experience leading IT and Cyber security audits and remediation programs
• Experience managing teams and engaging with executive management, Board committees, regulators and senior client stakeholders.

Mobility and travel

• Willingness and ability to travel to client locations at short notice, with an expectation of approximately 50% onsite travel.
• A valid passport and ability to meet applicable travel requirements.

What working at EY offers

At EY, we’re dedicated to helping our clients, from start-ups to Fortune 500 companies — and the work we do with them is as varied as they are.

You will work on inspiring and meaningful projects, supported by education, coaching and practical experience. We value our people and provide opportunities to shape your development through challenging assignments, knowledge exchange and collaboration. We offer:

• Support, coaching and feedback from engaging colleagues.
• Opportunities to develop new skills and progress your career.
• The freedom and flexibility to handle your role in a way that is right for you.

EY | Building a better working world 

 
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.  

 
Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.  

 
Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.