דרושים Staff ב-Ey ב-Colombia, Bogota

Job Summary

As Technology Risk Assurance Manager, you’ll actively establish, maintain and strengthen internal and external relationships. With the guidance of partners, directors and senior managers, you’ll identify potential business opportunities for EY. Drawing on your knowledge and experience, you’ll provide innovative commercial insights for clients, adapt methods and practices to fit operational team and cultural needs and contribute to thought leadership.

You’ll actively contribute to improving operational efficiency on projects and internal initiatives. In line with our commitment to quality, you’ll consistently drive projects to completion and confirm that work is of high quality. Your role in leading teams – or parts of teams – on engagements will depend on the size of engagement. When working on engagements, you’ll report to higher levels of management, who will expect you to anticipate and identify risks, and raise any issues with them as appropriate.

As an influential member of the team, you’ll help to create a positive learning culture, coach and counsel junior team members and help them to develop.

Client responsibilities

• Participate in Risk Assurance engagements
• Help manage the financial aspects of engagements by organizing staffing, tracking fees and communicating issues to project leaders
• Participate in business development initiatives
• Build strong internal relationships within EY Advisory Services and with other services across the organization
• Stakeholder management

People responsibilities

• Develop people through effectively supervising, coaching, and mentoring staff
• Conduct performance reviews and contribute to performance feedback for staff
• Contribute to people-related initiatives including recruiting, retaining and training IT Risk and Assurance professionals
• Maintain an educational program to continually develop personal skills of all staff
• Understand and follow workplace policies and procedures

Technical skills requirements

• Preferably B.E/B.Tech (Electronics, Electronics & Telecommunications, Comp. Science)/MBA/M.Sc./CA with atleast a minimum of 6-9 years
• You’ll have knowledge and experience of a number of the following areas, and be developing deep experience and technical competence in at least one:
  • Financial Audit IT Integration/ IT control testing experience
  • Service Organization Controls Reporting (SOCR - SSAE 16 // ISAE 3402) SOC 1, 2, & 3 Reporting
  • IT governance and risk:
    • Control frameworks such as COSO
    • Enterprise risk services with a specific focus on IT, and related industry standards
    • IT risk management framework
    • Common IT governance and control industry frameworks, including CObIT, RiskIT, ValIT, IT Governance Institute and ISACA good practices
    • IT industry frameworks such as ITIL and CMM
  • Project risk:
    • Robust understanding of program and project management practices
    • Familiarity with a typical IT systems development life cycle
    • Experience in developing technical skills specific to a solution, e.g., SAP, Oracle, CRM
    • Proven business process/analysis skills
  • IT assurance and compliance
  • A broad appreciation of business processes, data structures, IT applications and infrastructure, IT processes, and governance and internal control principles.
  • Depending upon your specific area(s) of focus, you’ll have additional skills and knowledge in:
    • IT audit in the context of a financial audit, and related regulations, auditing standards and guidelines
    • Control frameworks such as COSO, internal control principles and related regulations including SOX and J-SOX
    • Internal audit services with a specific focus on IT, and related industry standards
    • Common IT governance, control and assurance industry frameworks, including CObIT, RiskIT, ValIT, IT Governance Institute and ISACA good practices
    • IT industry frameworks such as ITIL and CMM
  • Infrastructure
    • Technically enabled IT /business transformation, program and project delivery, design, architecture and solution design, information management, implementation, operations, and management of IT infrastructure
    • Strong technical or security skills related to a broad range of operating systems, databases or security tools, e.g., UNIX, Linux, Windows 2000 and NT, firewalls and IDS systems
    • Familiarity with security and risk standards such as ISO 27001-2, PCI DSS, NIST, ITIL, COBIT
    • Experience of security testing methods and techniques including network, operating and application system configuration review
  • Applications
    • Application controls and security experience
      • security modeling
      • sensitive access and SoD testing
      • controls testing
    • Process systems and integrity, including risks and controls within business processes (manual, automated, security)
    • Change management
    • Project management and program management office (PMO) experience
    • Office skills/experience, e.g., Excel and Access

Additional requirements

• Demonstrated track record with a blue chip consulting organization and/or a blue chip organization
• Demonstrated experience in business job descriptions development and account management
• Strong academic record including a degree
• Relevant professional qualifications such as CISA, CA, CIA

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Job purpose: (part of description)

• Senior in the IT Consulting team to work on various Hybris projects for our customers across the globe.

Your client responsibilities: (part of description)

• Need to work as a team member to contribute in various technical streams of Custom development.
• Interface and communicate with the onsite coordinators
• Completion of assigned tasks on time and regular status reporting to the lead

We are looking for the candidates with the following: (Qualifications)

BE/BTech/MCA with a sound industry experience.

Mandatory skills:

• Experience on HMC, HAC, Cockpit (CMS, WCMS, CS, import, admin)
• Experience on integration with SAP and Non-SAP system
• Understand and handle the Hybris impex content Catalog
• Experience with Web Services (REST/SOAP)
• Experience working with Spring frameworks including Spring Core, Spring MVC, Spring Security and Spring Integration
• Experience working with Java Enterprise Edition (JEE) including Java, Servlets, JSP, and JSTL
• Minimum 1 end to end implementation
• Excellent business communication skills

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

KEY Capabilities:

• EDR Solution Design: Collaborate with clients and internal stakeholders to assess their cybersecurity needs and design EDR solutions tailored to their specific requirements.
• Deployment and Configuration: Installation \ configuration of NGAV and EDR\XDR solutions like CrowdStrike Falcon , Microsoft Defender for Endpoint, Carbon Black etc.. ensuring seamless integration with existing security infrastructure.
• Policy Creation: Develop and implement EDR policies and rules to detect and respond to security incidents effectively.
• Monitoring and Analysis: Continuously monitor endpoint security data and analyze alerts and events to identify potential threats and anomalies.
• Incident Response: Lead or assist in incident response activities, including investigation, containment, and remediation of security incidents on endpoints.
• Documentation: Maintain comprehensive documentation of NGAV and EDR\XDR configurations, policies, and procedures.
• Advise customers on best practices and use cases on how to use this solution to achieve customer end state requirements.
• Training and Knowledge Sharing: Provide training and knowledge transfer to client teams and internal staff to enhance their understanding of EDR technologies and best practices.
• Languages : Strong hand-on experience in development language as Python
• Excellent teamwork skills, passion, and drive to succeed and combat Cyber threats
• Experience in any SIEM technology Elastic SIEM, Splunk, IBM QRadar, Sentinel, etc.) will be an additional advantage

Qualification & experience:

• • Bachelor's or Master’s degree with sound technical skills
  • Proven experience in implementing and managing Next Generation Antivirus (NGAV) and Endpoint Detection and Response (EDR)\XDR technologies, such as CrowdStrike Falcon, Microsoft Defender for Endpoint, Carbon Black etc.
  • Knowledge of information security standards (ISO, NIST, PCI, GDPR etc.) (Good to have)
• Experience in Malware Analysis and Incident Response (Good to have)
  • Experience on Microsoft 365 Defender suite would be an advantage.
  • Excellent problem-solving and analytical skills.
  • Effective communication and teamwork skills.
  • Certification - CCSA, CEH, CISSP or NGAV, EDR\XDR-specific certifications are preferred

• Willing to learn new technologies and take up new challenges.

Ideally you should also be:

• Willing to work from ODC 5 days a week in rotational shift.

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Risk Platforming and Technology Solutions, Senior Manager

The risk landscape is continuously changing due to market volatility, geopolitical crises, widespread economic changes, regulatory reforms, and cyber threats. As a result, there has been increased pressure from the board of directors and investors to effectively monitor and manage risk. As demands rise and the risk landscape continues to be more complex, organizations are becoming increasingly reliant on the use of tailored GRC architectures requiring integrations across application and data layers to effectively identify, assess and mitigate their risk exposure.

As a member of our Risk Technology national practice, you will belong to a network of professionals helping our clients implement technology solutions to enrich and improve decision making, provide visibility and transparency of risk and compliance to stakeholders, and automate manual processes.

As our GRC platforming group continues to expand, we are seeking a highly motivated Senior Manager, focused on architecture, design, build, and deployment of tailored risk solutions. You will team with respected and experienced professionals to help our clients enhance and simplify their governance, risk, and compliance programs as well as realize technology agnostic solutions. You will also manage business development activities on strategic and global priority accounts.

We will support you with career-long training and coaching to develop your skills in risk strategy, risk function design, risk management and performance enhancement.

Your key responsibilities

Leveraging your knowledge of technology architecture, data integrations and platforms, governance risk and compliance(GRC)management, and design thinking, you will team across competencies and sectors to develop and deploy innovative tailored risk platform solutions for our clients. You will lead a global delivery team in project delivery and business development activities, as well as serve as the primary contact to our clients for risk platforming engagements.

Role Overview:

Key Responsibilities:

Serve as the primary point of contact for clients, leading engagements that drive the development of tailored risk management solutions.

Develop and articulate a strategic vision for risk platforming that aligns with current and future industry trends and evolving client needs.

Drive the integration of advanced technologies, including AI/Agentic AI/GenAI and data architecture and engineering, into risk management solutions through standardized architectures, data and design patterns, 3rd party integrations, and risk analytics.

Assists with developing the solution architecture for how various technology capabilities can be utilized within a client’s ecosystem o address their risk needs.

Ability to solution for data integrations and data pipelines, with the additional skills of organizing data into required data bases for traditional rules/ML solutions, vector databases for Gen AI and embeddings, AI monitoring solutions, reporting and overall systems performance.

Develop perspectives and content to upskill our teams and provide perspectives to client stakeholders on emerging trends in risk technology and maximizing the value of their implemented risk platform solutions aligned to trends.

• Well-versed in multitude of technology platform architecture frameworks such as TOGAF, Zachman, ArchiMate and others to formulate solution development plans and solution roadmaps.

Qualifications:

- Bachelor's degree in Information Technology, Computer Science, or a related field.

- 7-10 years of experience in data, AI/ML, GRC, risk technology and solutions.

Demonstrated ability to build and maintain strong client relationships, with a focus on delivering exceptional service and value.

A track record of driving innovation in risk management solutions, with a focus on leveraging advanced technologies (AI/Agentic AI/GenAI, data engineering and platforms, GRC platforms, etc.).

Well-versed in multitude of technology platform architecture frameworks such as TOGAF, Zachman, ArchiMate and others to formulate solution development plans and solution architectures.

Experience with python, java, cloud databases (non-columnar) such as Mongo, S3, Dynamics as well as to engineer data pipelines to feed the risk and compliance analytics.

Excellent verbal and written communication skills, with the ability to articulate complex technical concepts to non-technical stakeholders.

Strong project management skills, including experience with Agile methodologies, to ensure timely and successful project delivery.

Preferred Skills:

- Experience with specific GRC tools and platforms.

- Knowledge of industry standards and regulations related to risk and compliance.

- Certification in relevant IT architecture or data management areas

- Technical certifications: AWS, Azure, AI/ML, data platform certifications

- Big Four, Tech experience is a plus with IT risk, compliance, or security management experience

What we look for