E

Ernst & Young

Global professional services: consulting, assurance, tax

Digital Risk Senior

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeTaguig, Metro Manila, PhilippinesNo salary listedIn-person

About the Job

Requirements

  • A bachelor's or master's degree and approximately 3–6 years of related work experience are required.
  • At least 2–4 years of experience in IT risk and compliance is required.
  • Experience designing IT risk control frameworks, such as IT SOX, is required.
  • Experience implementing and testing internal controls, including IT general controls, IT application controls, IPE-related controls, and interface controls, is required.
  • Ability to identify control gaps, weaknesses, and areas for improvement is required.
  • Experience conducting IT internal control reviews and reviewing SOC 1 or SOC 2 reports is required.
  • Knowledge of IT risk, information security, or cybersecurity frameworks such as COSO, COBIT, ISO, and NIST is required.
  • Experience with IT compliance and regulatory assessments, including IT risk and controls assessments involving technologies such as SAP, Oracle, Workday, or Microsoft Dynamics, or emerging technologies such as cloud, RPA, and AI/ML, is required.
  • Experience assessing IT infrastructure and architecture risks, including data quality and data migration reviews, data privacy reviews, and operating system and database reviews, is required.
  • Strong exposure to client-facing roles and collaboration with cross-functional teams, including internal audit, IT security, and business stakeholders, to assess control effectiveness and facilitate remediation activities is required.
  • Excellent communication, documentation, and report-writing skills are required.

Responsibilities

  • Deliver quality client services and high-quality work products within expected timeframes and budget.
  • Monitor progress, manage risk, and keep key stakeholders informed about progress and expected outcomes.
  • Build relationships with client personnel to analyze, evaluate, and enhance information systems and improve security at procedural and technology levels.
  • Use knowledge of the current IT environment and industry trends to identify engagement and client service issues, and communicate these to the engagement team and client management through written correspondence and verbal presentations.
  • Stay current with business and industry trends relevant to clients’ businesses.
  • Demonstrate technical capabilities and professional knowledge, and quickly assimilate new knowledge.
  • Assess, design, and support implementation of controls, security, and IT risk solutions.

Desired Qualifications

  • Relevant industry certifications, such as CISA, CISM, CISSP, CRISC, CCSK, or ISO 27001, are desirable.

About the Company

Ernst & Young

Global professional services: consulting, assurance, tax

EY (Ernst & Young) provides professional services at a global scale, offering consulting, assurance, tax, and transaction advisory services. It serves clients across industries such as technology, media, real estate, hospitality, and construction. Instead of selling a single product, EY works with clients through tailored engagements where cross-disciplinary teams analyze challenges, design strategies, perform audits, help with tax planning, and assist with mergers or divestitures. What sets EY apart is its worldwide reach and integrated service model, industry-specific expertise, and focus on responsible business practices like sustainability, cybersecurity, and workforce flexibility. EY’s goal is to help organizations improve performance, manage risk, and achieve sustainable growth while building a better working world.

Company size
5,001-10,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Boston, MA
Founded
1991

Recently Posted Jobs

Explore more opportunities at Ernst & Young

See more jobs