Tulsa - Senior IT Audit - Technology & Security Risk Services-006WC

Description Within EY's Technology & Security Risk Services (TSRS) practice, the Senior participates in and supervises multiple client engagement teams and other related activities. Engagements focus on the assessment and/or evaluation of IT systems and the mitigation of IT-related business risks. Engagements may be either assurance (attestation) and/or risk advisory in nature, and vary considerably in size and complexity. All of our TSRS services, whether assurance or advisory in nature, are designed for the dual purpose of strengthening internal controls and, in so doing, helping to improve IT and business performance. In addition to assurance-related engagements such as financial attestation and SAS 70 engagements, our IT risk advisory services focus on IT governance and effectiveness; IT program management and assurance; security and controls of ERP implementations; and business intelligence and information analysis.

This professional serves as a fieldwork leader to assist clients in employing proper information systems, resources, and controls to maximize efficiencies and minimize risk. The successful candidate will work with client personnel to analyze, evaluate, and enhance information systems facilitating the business internal control process, and will assist clients and other TSRS professionals in performing information technology control and security engagements.

Responsibilities
Collaborate with other members of the engagement team to plan the engagement and develop work program timelines, risk assessments, and other planning documents. Work with the engagement team to document the business processes dependent on information technology. Serve as a fieldwork leader by directing the daily progress of fieldwork, informing supervisors of engagement status, and managing staff performance.

Demonstrate and apply a thorough understanding of complex information systems. Use knowledge of the current IT environment and industry IT trends to identify the engagement and client service issues, and communicate this information to the engagement team and client management through written correspondence and verbal presentations.

Demonstrate and apply strong project management skills, inspire teamwork and responsibility with engagement team members, and use current technology and tools to enhance the effectiveness of deliverables and services.

Qualifications

To qualify, candidates must have: a bachelor's or master's degree in business, accounting, finance, computer science, information systems, engineering, or a related discipline a minimum of 3 years of experience working as an IT auditor or IT risk adviser for a public accounting firm, a professional services firm, or within industry a minimum of 2 years of relevant experience would be acceptable for those holding a relevant graduate degree significant experience inapplying relevant technical knowledge in at least one of the following engagements: (a) financial statement audits; (b) internal or operational audits; (c) SAS 70 engagements; and/or (d) ERP security and control reviews (Oracle, SAP, PeopleSoft) project management skills strong written and verbal communication skills and presentation skills leadership, teamwork and client service skills demonstrated integrity within a professional environment

CPA, CA, CISA, CISSP, CISM, CBCP, CIA or CFE certification is desired; non-certified hires are required to become certified to be eligible for promotion to Manager.