Government and Public Sector - Technology Risk Senior Consultant

From strategy to theGovernment & Public Sector practice of Ernst & Young LLP providesa full range of consulting and audit servicesto help our Federal State Local and Education clients implement new ideas to help achieve their mission outcomes. We deliver real change and measurable results through our diverse highperforming teams quality work at the highest professional standards operational knowhow from across our global organization and creative and bold ideas that drive innovation. We enable our government clients to achieve their mission of protecting the nation and serving the people; increasing public safety; improving healthcare for our military veterans and citizens; delivering essential public services; and helping those in need. EY is ready to help our government build a better working world.

The opportunity

When youre on our GPS team youll have the opportunity to work across disciplines with professionals who have broad industry sector experience and deep subjectmatter knowledge. In GPS our growth strategy focuses on being accountcentric issuebased and competencydriven. Thats what differentiates EY GPS in the government marketplace.

As a member of our GPS team you will join a talented group of professionals serving in key roles advising U.S. federal agencies addressing issues in performance improvement program effectiveness audit and audit readiness financial management and Technology Risk. The EY GPS practice focuses across disciplines with defense and national security civilian health and international agencies.

Our broad portfolio of services is aimed at driving relevant tangible results. We believe integration fosters innovation. Unprecedented challenges require support that is connected responsive and insightful. Are you ready to join our team and help build a better working world

Your key responsibilities

As a member of our Technology Risk (Business Consulting) team you will serve as a key resource in delivering quality client services by understanding IT risk protecting business performance navigating digital transformation and complexity and assessing strategies initiatives processes and issues around IT controls cybersecurity cloud contractual compliance and system management..You will assist in the testing of IT general and application controls prepare for and potentially lead client meetings establish relationships with client personnel at the appropriate levels and deepen sector and client knowledge.You will provide direction and oversight of staff personnel and team objectives.

Some key capabilities you should be prepared to bring to clientfacing and internal teams include:

• Demonstrate working knowledge and aptitude in our key capabilities including IT general and application controls risk management information security and basic cybersecurity and emerging technology (automation AI)

• Take a practical approach to solving issues and gaining client agreement

• Collaborate among team members; promote an inclusive working environment

To qualify for the role you must have the following

• Bachelors degree in Business Accounting Finance Information Systems Information Technology or closely related field

• 3 years of relevant federal/government experience in information systems information security risk management IT and application controls

• Experience with internal controls and leading standards (FISCAM FISMA NIST CMMC OMB A123 and IT technologies (Windows UNIX Oracle Mainframe SAP)

• Experience preparing written or verbal materials and presenting project results to clients

• Participated in relevant audit/control testing engagements such as CFO Act/FISCAM OMB Circular A123 internal control over financial reporting/Systems (ICOFR/ICOFS) assessments audit readiness (DOD FIAR) SOC1 Examinations (SSAE18 and FISMA security reviews/implementations

• Possess anunderstanding of IT technical security controls (NIST 800 series requirements DOD Security Technical Implementation Guides (STIGS) FIPS guidance and Federal IT audit/examination methodologies (GAO FISCAM Financial Audit Manual (FAM) and NIST RMF Assessment and Authorization)

• Ability to obtain and maintain a Secret level Security Clearance

• Due to the nature of our work in the Government and Public Sector work may be required to be completed at client EY and/or contractor sites. Our goal is to assign professionals to projects within a commutable distance of their work location office. In certain circumstancestravelmay be required beyond your work location based on client and project needs. Candidates should be willing totravelon average 25 to 30 or more in a hybrid environment.

Ideally youll also have

• Experience working on large complex engagements within the Government and Public Sector.

• Worked in a Big Four global management consulting firm or bluechip company preferably with a government and public sector focus

• Strong analytical and problemsolving skills

• Ability to collaborate with clients and identify engagement followon opportunities

• Excellent verbal and written communication skills

• Working towards a preferred certification:

  • Certified Information Systems Auditor (CISA)

  • Certified Information Systems Security Professional (CISSP)

• Continuous learning: Youll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: Well provide the tools and flexibility so you can make a meaningful impact your way.
• Transformative leadership: Well give you the insights coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: Youll be embraced for who you are and empowered to use your voice to help others find theirs.