Experienced Assistant - Technology Risk, IT Audit

About the role

EY is looking for an experienced assistant for its Technology Risk and IT Audit function in Tbilisi. The role supports clients in managing risks and scarce resources, working in high-performing teams and acting as an ambassador for the IT Risk & Assurance team. It focuses on IT audit and risk assessment, not on software development, programming or penetration testing.

Key responsibilities

• Support financial audit engagements by identifying systems, applications and business processes relevant to financial reporting and audit scope.
• Test IT General Controls (ITGC), IT Application Controls (ITAC) and IT-Dependent Manual Controls (ITDM).
• Evaluate the design and operating effectiveness of those controls according to EY audit methodologies.
• Review system configurations, user access and control evidence, and document procedures, test results and control deficiencies.
• Support walkthroughs and discussions with client personnel, and assess the impact of control deficiencies on financial reporting risks.
• Prepare working papers and audit documentation in line with EY quality standards, and complete audit procedures within agreed timelines.
• Collaborate with financial audit and Technology Risk teams and stay informed on auditing standards, technologies and emerging risks.

Required profile

• Bachelor's degree in information systems, computer science, engineering, business, finance, accounting or a related field.
• At least 2 years of experience in IT audit, IT risk management, internal controls, IT operations, financial audit support or related project leadership.
• Excellent verbal and written communication in Georgian and English, with strong presentation and facilitation skills.
• Ideally: experience in financial statement, internal or operational audits, ITGC assessments, SOC 2 engagements or ISO 27001/NIST assessments; CISA, CISSP, CISM or CIA certification or active pursuit of one.

Required skills

• IT audit and IT risk assessment
• IT general controls and application controls testing
• Working papers and audit documentation
• Project management, information security or IT operations experience with ERP systems such as SAP is an asset

What we offer

• Continuous learning, including study support for CISA, CISM, CISSP and other qualifications, plus technical and soft skills training.
• A competitive remuneration package linked to personal and team performance.
• Leadership development, coaching and a diverse and inclusive culture.