Manager (IT Internal Audit) - Risk Consulting, EY Singapore

At EY, we develop you with future-focused skills and equip you with world-class experiences. We empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams.

We work together across our full spectrum of services and skills powered by technology and AI, so that business, people and the planet can thrive together. 

We’re all in, are you?

Join EY and shape your future with confidence.

Management and boards of directors rely heavily on internal audit to provide important proactive assessments and assurance around the effectiveness of controls and company processes, while also providing objective advisory support. In the new digital economy, technology will play an increasingly important role in every company’s governance framework.  As an IT internal audit professional, you’ll be leading engagements to identify technology control enhancements, IT operational and compliance process improvement and efficiency opportunities, as well as company-wide cost improvements. EY is a global leading service provider in this space, with a reputation for high quality and cost-effective innovative offerings.

Our structured career framework means you’ll continue to develop, whatever level you’re at. And with a network stretching around the globe, you’ll gain valuable insight across industries and geographies.

The opportunity

As part of our IT internal audit team, you’ll focus on client opportunities where your expertise can make a substantial impact. You’ll apply your knowledge and experience to shape our services and motivate your team. You’ll build valuable relationships with clients and develop strong capabilities, through both formal training and working with senior mentors and talented colleagues.

Your key responsibilities

As a Manager within the IT internal audit team, you will provide guidance and share knowledge with team members and participate in performing procedures especially focusing on complex, judgmental and/or specialized issues.

You will work with the team and the client to create plans for accomplishing engagement objectives and a strategy that complies with professional standards and addresses the risks inherent in the engagement.

Skills and attributes for success

• Brief the engagement team on the client's IT environment and industry IT trends
• Maintain relationships with client management and stakeholders to manage expectations of service, including work products, timing and deliverables
• Demonstrate a thorough understanding of complex information systems and apply it to client situations
• Use extensive knowledge of the client's business/industry to identify technological developments and evaluate impacts on the client's business
• Demonstrate excellent project management skills, inspire teamwork and responsibility with engagement team members
• Lead and manage end-to-end IT internal audit and advisory engagements, including planning, fieldwork, reporting, and follow-up activities
• Develop risk-based IT internal audit plans aligned to client’s organizational objectives, emerging risks, and regulatory requirements
• Evaluate the design and operating effectiveness of IT and cybersecurity controls across key technology domains, including cybersecurity, cloud computing, ERP systems, data governance, and third-party risk management
• Manage engagement budget, timeline and quality of deliverables
• Write clear, concise and objective audit reports, incorporating key aspects such as engagement objectives, scope, findings, risk implications, root causes and recommendations
• Review and challenge audit findings, root cause analyses, and management action plans to ensure practical and sustainable remediation
• Present audit observations, risk implications, and recommendations to senior management, Internal Audit leadership, Audit Committees, and Boards where required
• Monitor engagement quality and ensure compliance with EY methodology, IIA Standards, and client internal audit frameworks
• Understand EY and its service lines and actively assess what the firm can deliver to serve clients

To qualify for the role, you must have

• A university degree or equivalent professional qualification in accounting, business, information technology, or a related discipline
• At least 6 years of relevant experience, including a minimum of 4 years in IT audit or IT risk consulting within a public accounting firm, professional services firm, or industry environment.
• Ability to travel up to 20% of the time
• Significant experience in applying relevant technical knowledge in several of the following areas:

1. IT general controls review
2. Infrastructure review
3. Application controls review
4. Cybersecurity review
5. Digital transformation governance review
6. Artificial Intelligence (AI) governance and controls assessment
7. ERP security and control review (e.g., SAP, Oracle, Workday)
8. Cyber incident response and recovery readiness assessment
9. Third-party technology and outsourcing risk review
10. IT project and system implementation assurance review
11. DevSecOps and secure software development lifecycle review
12. Identity and Access Management (IAM) assessment
13. Privileged Access Management (PAM) review
14. Cloud security review
15. Data protection and data privacy review
16. Business continuity and IT disaster recovery review
17. IT / cybersecurity governance review
18. Leverage data analytics, automation, and AI-enabled audit techniques to enhance audit coverage, identify anomalies, and provide deeper risk insights
19. Design and oversee continuous auditing and continuous monitoring initiatives.

• Project management skills
• Strong written and verbal communication skills and presentation skills
• Support proposal development, client pursuits, and business development activities
• Build and maintain strong relationships with key client stakeholders and internal EY service lines
• Leadership, teamwork and client service skills
• Demonstrated integrity within a professional environment

Ideally, you will also have

• CPA, CA, CISA, CISSP, CISM, CBCP, CRISC, CCSP, CIA, CIPP, and/or CGEIT certification
• Non-certified hires are required to become certified within 1 year from the date of hire
• Based on an individual's professional background, area of specialization, or industry focus, we recognize that other certifications, credentials, or experience may be more relevant than the listed certifications and therefore may be acceptable substitutes

What we look for

Highly motivated individuals with excellent problem-solving skills and the ability to prioritize shifting workloads in a rapidly changing industry. An effective communicator, you’ll be a confident team player that collaborates with people from various teams while looking to develop your career in a dynamic organization.

What success looks like

Within this role, successful candidates will:

• Deliver high-quality IT internal audit and advisory engagements
• Build trusted relationships with client executives and stakeholders
• Identify meaningful technology, cybersecurity, and operational improvement opportunities
• Develop high-performing teams through coaching and mentoring
• Contribute to practice growth through innovation, business development, and thought leadership
• Stay ahead of emerging risks and technology trends including AI, cloud, cybersecurity, and digital transformation

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

All in to shape the future with confidence.