GDS Consulting_Digital Risk
EY
The Opportunity
All of our services whether assurance or advisory in nature are designed for the dual purpose of strengthening internal controls and, in so doing, helping to improve ITand business performance. In addition to assurance-related engagements such as financial attestation and SSAE 16 engagements, our IT risk advisory services focus on IT governance and effectiveness; IT program management and assurance; security and controls of ERP implementations; and business intelligence and information analysis.
KEY RESPONSIBILITIES:
Business Development
·Develop and maintain client relationships to manage expectations of service, including
work products, timing, and deliverables.
·Demonstrate a thoroughunderstanding of complex information systems and apply to
client’s IT environment
Client Service Delivery
·Provide high quality client service, working directly with onshore teams to understand and
evaluate client’s IT environment
·Working predominantly on off-shore engagements. Communication, written and verbal, with
the local EY teams would be expected.
Engagement Management:
·Understand the process workflow related to work requests from initiation through completion
and how workflow is managed within the firm's online tool for audit monitoring and project
management.
·Perform IT related controls testing and evaluation for Information Systems
·Prepare test procedures based on control requirements and documentation of test results
based on testing performed
·Report control deficiencies identified, to team Senior/Manager
·Use extensive knowledge of the client's business/industry to identify technological
developments and evaluate impacts on the client's business.
Practice Development:
·Adherence toEYauditmethodologies (related to risk assessment and prioritization, risk
responses, and risk management capability assessments), supporting tools and other
materials.
Skills and attributes for success:
ØGood Exposure in(at least 1-3 year experience):
· IT General Controls across platforms (Application, Operating System, Database) for following areas:
§User Access Management
§ChangeManagement
§Backup and Recovery Management
§Batch Job Management
§Problem/Incident Management
· IT Application Controls:Business Process cycles (Procure to Pay,Order to Cash,
Inventory, Payroll,Treasury, Record to Report)
·Generally accepted audit standards,and Corporate Internal Audit standards
·Experience with SOX, Internal Audit and SSAE 16 (At least 1 of 3)
ØWorking knowledge of:
·System architecture, business processes and system risks
·Application systems (SAP, Oracle, JD Edwards,Hyperion,Microsoft Nav, Salesforce,
PeopleSoft)
ØStrong written, oralcommunication, and presentationskills.
To qualify, you must have:
·A bachelor's degreeaccounting,computer science, information systems, engineering, or a
related discipline