Associate Consultant

Technical Excellence

Key skill sets required:

Experience of working on IT Audits and advisory work such as FAIT, SOCR (SOC1, SOC2), SOX 404, ISO 27001, etc


Should have an understanding of what are the typical risks/challenges we encounter in these audits


Should have Understanding of Manage Change, Manage Access and Manage IT Operations
Should have experience of working on ERP systems like SAP, Oracle etc so that they can conduct the IT audit on these systems
Should be able to manage multiple clients independently at the same time and also provide regular status updates to both client and EY management

Ability to work on tight schedules and deadlines


Excellent written and verbal communication, interpersonal, networking, teaming and problem-solving skills


Initiative in keeping abreast of changing industry practices, analysis and design methods, tools and techniques and emerging technologies


Be highly flexible, adaptable, and creative


Willingness to work in different time-zones as required


Willingness to travel is an added benefit tentative countries of travel are Saudi, UAE, Bahrain

Skills and attributes

To qualify for the role you must have
Qualification

To qualify for the role you must have:

Sc

in Computers, B

Tech/ B

E

in Computers, BCA in Computers
MCA in Computers, MS/ Sc

(Science) in Computers, M

Tech in Computers
Charted Accountant with experience in handling technology risk related engagement

Addon Skills & Certification:

Beneficial if they have done CISA, CCSFP or any relevant certification
Hands-on experience on SAP/ Oracle/ DevOps like environment
Cyber Security Professional with hands on experience in implementing and reviewing cyber security security related solutions to identify and manage the cyber security risks (VA, PT, Secure configuration review, OWASP Top 10, IT Infrastructure Assessments, etc


Beneficial if have hands on experience on Generative AI related solutions in technology risk domain

Experience

Experience:

1+ year of experience of working on IT Audits and advisory work such as FAIT, SOCR (SOC1, SOC2), SOX 404, ISO 27001, etc


Should have experience of working and testing IT Application Controls and ITGCs and also understand how to prepare risk and control matrix s

How to report issues/findings in an audit and ability to lead client meetings


Should have experience of drafting controls and report for Third-Party reporting, for example - SOC1/ SOC2 reports

Experience on HITRUST control testing will be an added advantage


Expectation is to manage the client and also the reporting manager vis a vis should have understanding of preparing Data Request Lists, Status Trackers etc


Determine that the work delivered is of high quality


Anticipate and identify engagement related risks and escalate issues as appropriate


Actively establish & strengthen client (functional heads & key influencers) and internal relationships


Big 4 experience preferred

People with the ability to work in a collaborative manner to provide services across multiple client departments while following the commercial and legal requirements

You will need a practical approach to solving issues and complex problems with the ability to deliver insightful and practical solutions

We look for people who are agile, curious, mindful and able to sustain postivie energy, while being adaptable and creative in their approach