Director - Technology Risk

About the role

The opportunity is to join our Global Internal Audit team as an Audit Leader. This role offers the opportunity to operate at a global executive level while further developing your leadership skills in an inclusive and diverse environment. The scope of Global Internal Audit encompasses both global systems and processes and those across the regions. You will be at the forefront helping EY manage the risks and challenges of a rapidly changing digital landscape, ensuring compliance with evolving regulations, and identifying opportunities for innovation and continuous improvement to deliver valuable outcomes.

Responsibilities

• Support the Chief Audit Executive build a technology risk capability that will enable internal audit to provide confidence and assurance that EY’s strategic technology and core platforms are protected and operating effectively.
• Lead the development of the technology-focused internal audit plan encompassing risk assessments and the strategic internal audit approach to emerging digital, cybersecurity, data, compliance and process risks.
• Maintain oversight of the technology environment, follow-up activities, and future audit or advisory coverage.
• Lead internal audits and advisory engagements across IT risk management, cybersecurity, digital compliance (including ISO, PCI, Privacy and other leading security and technology frameworks and regulations), program risk, resilience, data governance and responsible AI.
• Assess key technology environments, applications, systems, interfaces, IT dependencies and IT general controls to support risk-based audit scoping and execution.
• Oversee end-to-end audit delivery, including scoping, planning, budgeting, resourcing, execution, reporting and completion of required documentation in accordance with GIA methodology.
• Promote innovation, data analytics, automation and leading practices to enhance audit effectiveness and insight generation.
• Cultivate trusted relationships with senior management, Audit Sponsors, stakeholders, second line functions and subject matter resources to support effective audit engagement, alignment on key risks and transparent communication of audit progress and outcomes, while maintaining GIA’s independence, objectivity and professional scepticism.
• Develop and strengthen GIA’s technology audit capabilities by supporting recruitment, managing and coaching team members and subject matter resources, fostering knowledge sharing, technical upskilling and an inclusive, high-performing team environment.

Qualifications

• A bachelor’s degree or equivalent qualification in a related field, with approximately 15+ years of relevant experience in technology risk, internal audit, public accounting, risk management or a large global organization.
• Certifications and / or accreditations in Information Security, Microsoft, SAP, AI or other relevant technologies.
• Experience in leading complex global projects and internal audits, building trust and engagement with senior stakeholders and delivering clear, risk-based insights that support effective governance, risk management and control improvement.

Skills and Attributes

• Foster an inclusive, innovative and high-performing team environment by actively coaching, mentoring and developing team members.
• Deliver high-quality audit and advisory work within agreed timelines and budgets, while proactively managing risks, monitoring progress and keeping stakeholders informed of key outcomes and emerging matters.
• Communicate clearly and effectively, providing actionable insights and practical recommendations on control issues, risk implications and opportunities to address identified gaps.
• Stay current on business, technology and industry trends relevant to EY’s evolving risk landscape.

Benefits

This job posting relates to an existing vacancy within our organization. Please note that the compensation and benefits package are subject to change and are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. For more information, please refer to the job posting.