Government and Public Sector - Assurance - Tech Risk - Senior

At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

From strategy to execution, the Government & Public Sector practice of Ernst & Young LLP provides a full range of consulting and audit services to help our Federal, State, Local and Education clients implement new ideas to help achieve their mission outcomes. We deliver real change and measurable results through our diverse, high-performing teams, quality work at the highest professional standards, operational know-how from across our global organization, and creative and bold ideas that drive innovation. We enable our government clients to achieve their mission of protecting the nation and serving the people; increasing public safety; improving healthcare for our military, veterans and citizens; delivering essential public services; and helping those in need.

About the role

The Government & Public Sector (GPS) team at EY focuses on being account-centric, issue-based, and competency-driven, differentiating EY GPS in the government marketplace. As a member of our GPS team, you will join a talented group of professionals serving in key roles advising U.S. federal agencies addressing issues in performance improvement, program effectiveness, audit and audit readiness, financial management, and Technology Risk. The practice works across disciplines with defense and national security, civilian, health, and international agencies, delivering relevant, tangible results through a broad portfolio of services.

Responsibilities

• Serve as a key resource in delivering quality client services on financial statement audits, attestation engagements, and IT control projects.
• Conduct research, assist in the testing of IT general and application controls, and prepare for or potentially lead client meetings.
• Establish relationships with client personnel at appropriate levels and deepen sector and client knowledge.
• Demonstrate working knowledge and aptitude in IT general and application controls, risk management, information security, and information assurance.
• Take a practical approach to solving issues and gaining client agreement.
• Collaborate among team members and promote an inclusive working environment.
• Participate in relevant audit/control testing engagements (e.g., CFO Act/FISCAM, OMB Circular A-123 internal control over financial reporting/Systems (ICOFR/ICOFS) assessments, audit readiness (DOD FIAR), ATC-320 SOC-1 Examinations (SSAE-18), and FISMA security reviews/implementations).
• Apply understanding of IT technical security controls (e.g., NIST 800 series requirements, DOD Security Technical Implementation Guides (STIGS)), FIPS guidance, and Federal IT audit/examination methodologies (e.g., GAO FISCAM, Financial Audit Manual (FAM), and NIST RMF Assessment and Authorization).
• Complete control testing over financial system controls compliance, IT general and application controls, and information assurance controls in areas such as information assurance, access control, change control, segregation of duties, and disaster recovery.

Requirements

• Bachelor’s degree in Business, Accounting, Finance, Information Systems, Information Technology, or a closely related field.
• Must be able to obtain a federal security clearance.
• 2+ years of relevant experience in information assurance, information security, risk management, IT and application controls, leading standards (e.g., COSO, ERM, FISCAM, FISMA, NIST), IT technologies (e.g., Windows, UNIX, Oracle, Mainframe, SAP), preparing written or verbal materials, and assisting with presenting project results to clients.

Skills

• Strong analytical and problem-solving skills.
• Ability to collaborate with clients and identify engagement follow-on opportunities.
• Excellent verbal and written communication skills.
• Experience working on large, complex engagements within the Government and Public Sector.
• Experience in a Big Four, global management consulting firm or blue-chip company, preferably with a government and public sector focus.

Preferred Qualifications

• Certified Information Systems Auditor (CISA).
• Certified Information Systems Security Professional (CISSP).

Benefits

• Comprehensive compensation and benefits package, including medical and dental coverage, pension, and 401(k) plans.
• Flexible vacation policy based on personal circumstances.
• Paid time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence to support physical, financial, and emotional well-being.

Pay

The base salary range for this job in all geographic locations in the US is $87,800 to $160,900. The base salary range for New York City Metro Area, Washington State, and California (excluding Sacramento) is $105,400 to $182,800. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills, and geography.

Schedule

• For roles within the federal practice, the flexibility to travel up to approximately 30% is preferred.
• Within the state, local, and education practice, the flexibility to travel up to approximately 80% is preferred.
• Hybrid model: Expectation to work in person 40-60% of the time over the course of an engagement, project, or year.