EY (Ernst & Young) is one of the world’s leading professional services organizations, providing consulting, assurance, tax, strategy, and transaction services across global markets. Through its Global Delivery Services (GDS) network, EY supports clients worldwide with innovative solutions in risk management, digital transformation, cybersecurity, and technology consulting. EY is currently hiring experienced professionals for the position of Senior – ITGC/ITAC (IT General Controls / IT Application Controls) within its Digital Risk and Technology Risk Consulting practice.

Job Overview

About the Role

EY is looking for experienced Technology Risk professionals to join its Digital Risk team. The selected candidates will work on IT Risk Advisory, IT Audits, SOX Compliance, ITGC Testing, ITAC Reviews, Internal Controls, Cybersecurity Assessments, and Regulatory Compliance engagements for global clients.

This role offers exposure to international projects, advanced risk management frameworks, and emerging technologies while working alongside EY’s global consulting teams.

Key Responsibilities

IT Risk & Control Assessments

• Participate in IT Risk and Technology Consulting engagements.
• Conduct IT General Controls (ITGC) and IT Application Controls (ITAC) reviews.
• Perform compliance testing and control assessments.
• Evaluate IT governance frameworks and internal controls.

Audit & Assurance Activities

• Prepare audit reports and client deliverables.
• Review compliance evidence and control documentation.
• Support SOX and J-SOX compliance programs.
• Manage assurance findings and remediation tracking.

Risk Management & Compliance

• Assess Change Management, Access Management, System Development, and IT Operations controls.
• Evaluate compliance with NIST, COBIT, ITIL, ISO 27001, and other industry frameworks.
• Support Cybersecurity, Data Privacy, and Business Resilience audits.

Data Analytics & Automation

• Utilize data analysis tools such as:
  • Tableau
  • Power BI
  • Python
  • MS SQL Server
  • ACL
  • Monarch
• Drive automation and continuous control monitoring initiatives.

Stakeholder Management

• Collaborate with client teams and internal stakeholders.
• Develop productive client relationships.
• Mentor junior team members and provide performance feedback.

Required Skills

Core Technical Skills

✅ IT General Controls (ITGC)

✅ IT Application Controls (ITAC)

✅ Internal Audit & Internal Controls

✅ SOX / J-SOX Compliance

✅ Risk Assessment & Risk Management

✅ Information Security Controls

✅ IT Governance Frameworks

✅ Regulatory Compliance

Frameworks & Standards

• COSO
• COBIT
• NIST
• Risk IT
• ITIL
• ISO 27001
• PCI DSS
• SSAE16

Security & Audit Experience

• Application Controls Testing
• Segregation of Duties (SoD) Testing
• Access Management Reviews
• Security Assessments
• SDLC Reviews
• Change Management Reviews
• Network Security Audits
• Data Privacy Assessments

Preferred Technical Knowledge

• Windows & Linux Environments
• UNIX Systems
• Firewalls
• Intrusion Detection Systems (IDS)
• Database Security Controls
• Cybersecurity Governance

Educational Qualifications

Bachelor’s Degree

• B.Com
• B.Sc
• B.Tech / B.E.
• Electronics & Telecommunications
• Computer Science

Postgraduate Qualifications

• MBA / PGDM
• M.Tech
• M.Sc
• CA

Preferred Certifications

🏆 CISA (Certified Information Systems Auditor)

🏆 CRISC (Certified in Risk and Information Systems Control)

🏆 ISO 27001 Lead Auditor

Ideal Candidate Profile

• 3–8 years of experience in IT Audit, ITGC, ITAC, SOX, Internal Controls, or Technology Risk.
• Strong understanding of risk management and compliance frameworks.
• Experience working with enterprise applications and IT environments.
• Good communication and stakeholder management skills.
• Ability to work with global teams and international clients.

Why Join EY?

✔ Global consulting brand with operations in over 150 countries.

✔ Exposure to Fortune 500 clients and international projects.

✔ Hybrid working model.

✔ Extensive learning and certification support.

✔ Career progression through mentorship and leadership programs.

✔ Inclusive and diverse work culture.

✔ Opportunities in cybersecurity, risk consulting, data analytics, and emerging technologies.

Who Should Apply?

This opportunity is highly suitable for professionals currently working as:

• IT Auditor
• Technology Risk Consultant
• SOX Consultant
• Internal Auditor (IT)
• IT Compliance Analyst
• Information Security Consultant
• Risk Advisory Professional
• Cybersecurity Auditor
• Governance, Risk & Compliance (GRC) Consultant
• IT Controls Testing Specialist

Location: Noida & Bengaluru (Hybrid)

Experience: 3–8 Years

Role Level: Senior Consultant / Senior Associate Level

This is an excellent opportunity for professionals looking to build a long-term career in Technology Risk, IT Audit, Cybersecurity Governance, and IT Compliance Consulting with a global leader like EY.

APPLY LINK