Houston - IT Audit - Technology & Security Risk Services-006W6

Description Within EY's Technology & Security Risk Services (TSRS) practice, the experienced Staff serves as a member of multiple client engagement teams. Engagements focus on the assessment and/or evaluation of IT systems and the mitigation of IT-related business risks. Engagements may be either assurance (attestation) and/or risk advisory in nature, and vary considerably in size and complexity. All of our TSRS services, whether assurance or advisory in nature, are designed for the dual purpose of strengthening internal controls and, in so doing, helping to improve IT and business performance. In addition to assurance-related engagements such as financial attestation and SAS 70 engagements, our IT risk advisory services focus on IT governance and effectiveness; IT program management and assurance; security and controls of ERP implementations; and business intelligence and information analysis.

Responsibilities

Demonstrate an understanding of the clients platform structure, security software used, and how information systems are used at the client and within the clients industry.

Execute procedures, perform detailed analysis, reach conclusions, document results, and suggest ideas for efficiencies. Recognize relevant financial statement issues from basic analysis and identify potential non-compliance standards.

Maintain relationships with the client at the appropriate levels. Demonstrate teamwork and responsibility with engagement team members, stay abreast of the current IT environment and industry IT trends relevant to clients business, and use current technology and tools to enhance the effectiveness of deliverables and services.

Qualifications

To qualify, candidates must have: a bachelor's or master's degree in business, accounting, finance, computer science, information systems, engineering, or a related discipline approximately 1 year of experience working as an IT auditor or IT risk adviser for a public accounting firm, a professional services firm, or within industry experience inapplying relevant technical knowledge in at least one of the following engagements: (a) financial statement audits; (b) internal or operational audits; (c) SAS 70 engagements; and/or (d) ERP security and control reviews (Oracle, SAP, PeopleSoft) advanced written and verbal communication skills a dedication to teamwork demonstrated integrity within a professional environment

CPA, CA, CISA, CISSP, CISM, CBCP, CIA or CFE certification is desired; non-certified hires are required to become certified to be eligible for promotion to Manager.