Apply on Employer Site

EY · 3 days ago

Government and Public Sector - Assurance - Technology Risk- Senior- TS SCI Clearance

Washington, DC

Full-time

Hybrid

Mid, Senior Level

$88K/yr - $161K/yr

3+ years exp

EY is a globally connected powerhouse of diverse teams, seeking to build a better working world. The role involves advising U.S. federal agencies on performance improvement, program effectiveness, audit readiness, and Technology Risk, while delivering quality client services in financial audits and IT control projects.

AccountingAdviceBusiness IntelligenceConsultingFinancial ServicesProfessional Services

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Serve as a key resource in delivering quality client services on financial statement audits, attestation engagements and IT control projects

Conduct research as needed, assist in the testing of IT general and application controls, prepare for and potentially lead client meetings, establish relationships with client personnel at the appropriate levels, and deepen sector and client knowledge

Demonstrate working knowledge and aptitude in our key capabilities for example, IT general and application controls, risk management, information security, and information assurance

Take a practical approach to solving issues and gaining client agreement

Collaborate among team members; promote an inclusive working environment

Qualification

IT AuditInformation AssuranceRisk ManagementInformation SecurityIT ControlsCISA CertificationCISSP CertificationAnalytical SkillsProblem-Solving SkillsCommunication SkillsCollaboration Skills

Required

Bachelor's degree in Business, Accounting, Finance, Information Systems, Information Technology or closely related field

Must have an active Top Secret SCI clearance

3+ years of relevant experience in information assurance, information security, risk management, IT and application controls, leading standards (e.g., COSO, ERM, FISCAM, FISMA, NIST), IT technologies (e.g., Windows, UNIX, Oracle, Mainframe, SAP), preparing written or verbal materials, and assisting with presenting project results to clients

Participated in relevant audit/control testing engagement (e.g., CFO Act/FISCAM, OMB Circular A-123 internal control over financial reporting/Systems (ICOFR/ICOFS) assessments, audit readiness (DOD FIAR), ATC-320 SOC-1 Examinations (SSAE-18), and FISMA security reviews/implementations

Possess an understanding of IT technical security controls (e.g. NIST 800 series requirements, DOD Security Technical Implementation Guides (STIGS)), FIPS guidance, and Federal IT audit/examination methodologies (e.g. GAO FISCAM, Financial Audit Manual (FAM), and NIST RMF Assessment and Authorization)

Experience in completing Control testing over financial system controls compliance, IT general and application controls, and information assurance controls in areas of information assurance, access control, change control, segregation of duties and disaster recovery

The Government and Public Sector Practice's staffing model is to assign resources to projects aligned to the office within the metropolitan area you have been hired; however, in certain circumstances, travel may be required within and/or beyond your geographic region based on client and project needs. For roles within the federal practice, the flexibility to travel up to approximately 30% is preferred. Within the state, local and education practice, the flexibility to travel up to approximately 80% is preferred

Candidate MUST be comfortable working in-person/onsite as needed