EY EY Türkiye - Technology Risk Senior 

Turkey, Istanbul 

430000489

QUALIFICATIONS AND JOB DESCRIPTION

· 2 - 5 years of relevant work experience in internal audit, internal control, function in IT auditor or IT risk advisor for a public accounting firm, a professional services firm, or within industry. You also have prior consulting experience with a Big 4 firm, consulting or audit firm or large global institution.

· You will bring your significant experience in applying relevant technical knowledge in at least one of the following engagements: (a) ITGCs for financial statement audits; (b) internal or operational audits; (c) Service Organization Controls Reporting engagements; and/or (d) ERP security and control reviews (Oracle, SAP, PeopleSoft),(e) consulting projects in the areas of IT Security /IT Compliance or Data Analytics;

· Familiarity with risk-based auditing and risk and control strategies

· A good understanding of legal and internal regulatory requirements

· Analytical skills and competence in recognizing cause and effect relationships and inquisitive approach

· Effective communication skills

· Proficiency with MS Office

· Relevant certifications, such as CIA, CISA, CISM, CGEIT, CRISC, ITIL, CISSP, CIA; ISO27001, ISO22301, Prince2 or PMP is a plus

· English language skills - excellent written and verbal communication

JOB DESCRIPTION

· Work as a team member in planning, execution and delivery of process audits (including credit, deposit, credit card, treasury, accounting, financial reporting, alternative distribution channels and payment systems processes) in banks and their subsidiaries

· Work effectively as a team member, sharing and taking responsibility, providing support, maintaining communication and updating senior team members on progress

· Assist in preparing reports and schedules that will be delivered to clients and regulators

· Develop and maintain productive working relationships with team and client personnel

· Making technical contribution to audit client engagements and internal projects

· Technology risk assessments

· Regulatory IT audits (BDDK, SPK, KGK, SOX, etc.)

· IT framework implementation (e.g. COBIT, ISO standards, security frameworks, ITIL, TOGAF, etc.)

· Risk and control analytics and risk technology services

· IT application reviews

· IT contract reviews

· Control testing

· Control design