Director - Technology Risk

About the role

The opportunity is to join our Global Internal Audit team as an Audit Leader. This role offers the opportunity to operate at a global executive level while further developing your leadership skills in an inclusive and diverse environment.

Responsibilities

• Support the Chief Audit Executive build a technology risk capability that will enable internal audit to provide confidence and assurance that EY's strategic technology and core platforms are protected and operating effectively.
• Lead the development of the technology-focused internal audit plan encompassing risk assessments and the strategic internal audit approach to emerging digital, cybersecurity, data, compliance and process risks.
• Maintain oversight of end-to-end audit delivery, including scoping, planning, budgeting, resourcing, execution, reporting and completion of required documentation in accordance with GIA methodology.
• Promote innovation, data analytics, automation and leading practices to enhance audit effectiveness and insight generation.
• Cultivate trusted relationships with senior management, Audit Sponsors, stakeholders, second line functions and subject matter resources to support effective audit engagement, alignment on key risks and transparent communication of audit progress and outcomes, while maintaining GIA’s independence, objectivity and professional scepticism.
• Develop and strengthen GIA’s technology audit capabilities by supporting recruitment, managing and coaching team members and subject matter resources, fostering knowledge sharing, technical upskilling and an inclusive, high-performing team environment.

Requirements

The successful candidate will be an experienced Technology Risk Director with strong experience in cybersecurity, new technology (e.g. AI / automation and related tools), technology governance and risk management, risk management and internal audit. The primary capability is to bring broad experience across IT governance, cybersecurity, digital compliance, ERP, resilience, data governance, responsible AI and technology-enabled transformation.

Attributes for Success

• Foster an inclusive, innovative and high-performing team environment by actively coaching, mentoring and developing team members.
• Deliver high-quality audit and advisory work within agreed timelines and budgets, while proactively managing risks, monitoring progress and keeping stakeholders informed of key outcomes and emerging matters.
• Communicate clearly and effectively, providing actionable insights and practical recommendations on control issues, risk implications and opportunities to address identified gaps.
• Stay current on business, technology and industry trends relevant to EY’s evolving risk landscape.

Skills

• A bachelor’s degree or equivalent qualification in a related field, with approximately 15+ years of relevant experience in technology risk, internal audit, public accounting, risk management or a large global organization.
• Certifications and / or accreditations in Information Security, Microsoft, SAP, AI or other relevant technologies.
• Demonstrated experience in the following areas: Technology-enabled Integrated Risk Management (IRM) or Governance, Risk and Compliance (GRC) programs, Portfolio, Program and Project risk management consulting and/or assurance services, Regulatory Compliance (e.g. Privacy, SoCI Act, SoX, Spam Act), Resiliency – design, build, implementation of business and technology resilience programs, AI Governance, Responsible Use of AI (incl. Responsible AI strategy, AI Governance framework), Governance, Risk and Compliance, Internal Controls and Internal Audit (incl. Controls optimisation, SoX), Assurance – technology-focused internal audit (incl. IT General Controls, Cyber Security, and AI Governance).