Experienced Assistant – Technology Risk – IT Audit

About the role

Join EY’s Technology Risk & Assurance team as an Experienced Assistant, supporting clients in managing IT‑related risks within financial audit engagements. You will work with high‑performing teams to evaluate controls, document findings, and contribute to delivering high‑quality assurance services.

Key responsibilities

• Identify systems, applications, and business processes relevant to financial reporting and audit scope.
• Test IT General Controls (ITGC), IT Application Controls (ITAC) and IT‑Dependent Manual Controls (ITDM).
• Evaluate design and operating effectiveness of these controls following EY audit methodologies.
• Review system configurations, user access and control evidence to support audit conclusions.
• Document audit procedures, testing results and control deficiencies in line with engagement requirements.
• Conduct walkthroughs and discussions with client personnel to understand systems, processes and controls.
• Assess the impact of control deficiencies on financial reporting risks.
• Prepare working papers and audit documentation according to EY quality standards.
• Execute assigned audit areas independently and meet agreed timelines.
• Collaborate with financial audit and Technology Risk teams to ensure high‑quality assurance delivery.
• Stay updated on auditing standards, emerging technologies and related risks.

Required profile

• Bachelor’s degree in information systems, computer science, engineering, business, finance, accounting or a related field.
• Minimum of 2 years experience in IT audit, IT risk management, internal controls, IT operations, or financial audit support.
• Professional demeanor with the ability to work in dynamic, diverse client environments.
• Strong verbal and written communication skills.

Required skills

• IT General Controls (ITGC) testing.
• IT Application Controls (ITAC) testing.
• IT‑Dependent Manual Controls (ITDM) testing.
• Understanding of system configurations, user access management and control evidence.