Overview In this Technology Risk role within EY's Government & Public Sector (GPS) practice, you help deliver IT audit and attestation services that support federal clients. You'll work with cross-functional teams to test IT controls, assess risk, and communicate results to clients at appropriate levels. You'll apply information security and risk-management expertise to improve control environments. This opportunity combines public-sector impact with hands-on technical work at scale, in a collaborative, inclusive culture. Compensation / Benefitsmedical and dental coveragepension and 401(k) planspaid time off optionshybrid work modelflexible vacation policyaccommodations for wellbeing ResponsibilitiesDeliver IT audit, attestation engagements, and IT control projects for clientsAssist and potentially lead client meetings and establish relationships with client personnelTest IT general and application controls and conduct research as neededDemonstrate working knowledge of IT controls, risk management, information security, and information assuranceCollaborate with team members and promote an inclusive working environmentPrepare written materials and present project results to clientsDeepen sector and client knowledge across defense, civilian, health, and international agenciesTravel as needed (federal up to 30%, state/local up to 80%) for project needsPossess understanding of IT security controls (NIST, FISMA) and audit methodologies (FISCAM, FISMA, SSAE-18)Support control testing over financial system controls compliance and disaster recovery Key requirementsBachelor's degree in a related fieldAbility to obtain a federal security clearance2+ years of relevant experience in information assurance, information security, risk management, IT and application controlsExperience with standards such as COSO, ERM, FISCAM, FISMA, NISTParticipation in audit/control testing engagements (CFO Act/FISCAM, ICOFR/ICOFS, SOC-1/SSAE-18, FISMA)Understanding IT technical security controls (NIST 800 series, STIGS), FIPS guidance, and federal IT audit methodologiesExperience with IT technologies (Windows, UNIX, Oracle, Mainframe, SAP)Strong analytical and problem-solving skills; ability to communicate verbally and in writingWillingness to travel as project needs requireBig Four or government/public sector experience preferredPreferred Certifications: CISA, CISSPStrong analytical and problem-solving skillsExcellent verbal and written communicationCollaboration with clients and cross-functional teamsIT general controlsIT application controlsInformation security and information assurance
Not specified in the original listing.
Not specified in the original listing.
