EY Government Public Sector - Technology Risk Manager 

United States, Virginia, Arlington 

451066092

Skills and attributes for success

• Demonstrate working knowledge and aptitude in our key capabilities including IT general and application controls, risk management, information security, and information systems

• Take a practical approach to solving issues and gaining client agreement

• Collaborate among team members; promote an inclusive working environment

• Train and develop junior personnel in technical skills and career advancement

• Manage and grow a business portfolio through building relationships, identifying value, and delivering quality services

To qualify for the role you must have

• Bachelor's degree in Business, Accounting, Finance, Information Systems, Information Technology or closely related field

• 5+ years of relevant federal/government experience in information systems, information security, risk management, IT and application controls

• Experience with internal controls and leading standards (FISCAM, FISMA, NIST, CMMC, OMB A-123) and IT technologies (Windows, UNIX, Oracle, Mainframe, SAP)

• Experience preparing written or verbal materials, and presenting project results to clients

• Experience leading teams of 10+ personnel in delivering services and meeting business objectives

• Experience developing internal and external relationships, to include new business opportunities, requests for information, and proposals

• Participated in relevant audit/control testing engagements such as CFO Act/FISCAM, OMB Circular A-123 internal control over financial reporting/Systems (ICOFR/ICOFS) assessments, audit readiness (DOD FIAR), SOC-1 Examinations (SSAE-18), and FISMA security reviews/implementations

• Possess an understanding of IT technical security controls (NIST 800 series requirements, DOD Security Technical Implementation Guides (STIGS)), FIPS guidance, and Federal IT audit/examination methodologies (GAO FISCAM, Financial Audit Manual (FAM), and NIST RMF Assessment and Authorization)

• Ability to obtain and maintain a Secret level Security Clearance

• One of the following professional certifications:

  • CISA (Certified Information Systems Auditor)

  • CPA (Certified Public Accountant)

  • CGFM (Certified Government Financial Manager)

  • CDFM (Certified Defense Financial Manager)

  • CISSP (Certified Information Systems Security Professional)

• Willingness to travel 20 – 30% or more. Due to the nature of our work in the Government and Public Sector, this work is required to be completed at client, EY and/or contractor sites. Our goal is to assign professionals to projects within a commutable distance of their work location office.  In certain circumstances, travel may be required beyond your work location based on client and project needs.

Ideally you'll also have

• Experience executing project plans on large, complex engagements from analysis through implementation
• Worked in a Big Four, global management consulting firm or blue-chip company, preferably with a government and public sector focus
• Strong analytical and problem-solving skills
• Ability to collaborate with clients and identify engagement follow-on opportunities

• Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.