Government and Public Sector - Assurance - Tech Risk - Manager

About the role

When you join EY’s Government & Public Sector (GPS) practice, you’ll work across disciplines with professionals who bring broad industry experience and deep subject-matter knowledge. Our growth strategy is account-centric, issue-based, and competency-driven, differentiating EY GPS in the government marketplace. As part of the GPS team, you’ll advise U.S. federal agencies on performance improvement, program effectiveness, audit and audit readiness, financial management, and Technology Risk. The practice serves defense and national security, civilian, health, and international agencies, delivering tangible results through a connected, responsive, and insightful approach.

Responsibilities

• Serve as a key resource in delivering quality client services on financial statement audits, attestation engagements, and IT control projects.
• Conduct research, assist in testing IT general and application controls, and prepare for or lead client meetings.
• Establish relationships with client personnel and deepen sector and client knowledge.
• Demonstrate working knowledge and aptitude in IT general and application controls, risk management, information security, and information assurance.
• Take a practical approach to solving issues and gaining client agreement.
• Collaborate among team members and promote an inclusive working environment.
• Participate in planning through reporting phases and oversee execution of audit/control testing engagements (e.g., CFO Act/FISCAM, OMB Circular A-123, DOD FIAR, ATC-320 SOC-1 Examinations, FISMA security implementations, and OIG FISMA reviews).
• Apply strong understanding of IT technical security controls (e.g., NIST 800 series, DOD STIGs, FIPS guidance) and federal IT audit methodologies (e.g., GAO FISCAM, Financial Audit Manual, NIST RMF).
• Oversee and complete control testing for financial system compliance, IT general and application controls, and information assurance controls in areas such as access control, change control, segregation of duties, and disaster recovery.

Requirements

• Bachelor’s degree in Business, Accounting, Finance, Information Systems, Information Technology, or a closely related field.
• 5+ years of relevant experience in information assurance, information security, risk management, leading standards (e.g., COSO, ERM, FISCAM, FISMA, NIST), IT technologies (e.g., Windows, UNIX, Oracle, Mainframe, SAP), and preparing client-facing materials.
• Must be able to obtain and maintain a Secret-level clearance or higher.

Preferred Qualifications

• Experience executing project plans on large, complex engagements from analysis through implementation.
• Background in a Big Four firm, global management consulting firm, or blue-chip company, preferably with a government and public sector focus.
• Strong analytical and problem-solving skills.
• Ability to collaborate with clients and identify follow-on engagement opportunities.
• Certified Information Systems Auditor (CISA) or Certified Information Systems Security Professional (CISSP).

Benefits

• Comprehensive compensation and benefits package, with rewards based on performance.
• Medical and dental coverage, pension, and 401(k) plans.
• Flexible vacation policy and designated EY Paid Holidays, Winter/Summer breaks, and personal/family care leave.
• Team-led and leader-enabled hybrid work model, with an expectation to work in person 40-60% of the time for client-facing roles.

Pay

The base salary range for this role in most U.S. geographic locations is $111,600 to $204,700. For New York City Metro Area, Washington State, and California (excluding Sacramento), the range is $134,000 to $232,700. Individual salaries are determined by factors including education, experience, knowledge, skills, and geography.

Schedule

• For federal practice roles, flexibility to travel up to approximately 30% is preferred.
• For state, local, and education practice roles, flexibility to travel up to approximately 80% is preferred.