EY Technology Risk Senior Consultant 

Malta, Central Region 

662800813

Key responsibilities:

• Assisting clients in identifying and evaluating business and technology risks, internal controls which mitigate risks, and related opportunities for internal control improvement
• Conduct reviews and walkthroughs of IT infrastructure, applications, and programs
• Perform IT & Cybersecurity risk assessments
• Create a Risk and Control Matrix (RACM)
• Prepare Process Documentation (Narratives & Flowcharts)
• Preparation of test scripts and test workpapers
• Conduct test of Design and Operating effectiveness of internal controls
• Discuss the gaps & other issues, if any, with the application owner
• Document test results
• Report testing results to the application owners and management

• Must possess a bachelor’s degree in Business & IT or a related field.
• A minimum of 2 years’ experience with expertise in IT risk assessments, IT audit (ITGC & ITAC), and system security reviews.
• Experience with cyber security frameworks (ISO, NIST, etc.)
• One of Industry recognized certification in security (such as CISA,CISM, CISSP, CEH, ISC2 or equivalent)
• Experience in performing and interpreting gap analysis and developing risk remediation strategies.
• In-depth technical knowledge of IT systems and IT controls.
• Must have good communication skills, presentation skills, and soft skills.
• Knowledge of, various utility packages are preferred (MS Excel, MS PowerPoint, MS Word).

What do we offer?
We provide attractive salaries, excellent benefits and reward you for your performance. You will also be given full training and the opportunity to undertake industry recognised professional qualifications. As an investor in people, we will provide:
• Support and coaching from some fantastic colleagues
• Opportunities to quickly progress your career
• Flexibility to handle your role in a way that’s right for you
EY also offers multitude of learning resources including the possibility to pursue an accredited Tech MBA program through self-paced learning.