EY
Government and Public Sector - Senior - Technology Assurance - Top Secret - SCI
EY, Mc Lean, Virginia, us, 22107
Government and Public Sector - Senior - Technology Assurance - Top Secret - SCI Clearance
At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better. Join us and build an exceptional experience for yourself, and a better working world for all.The exceptional EY experience. It's yours to build. EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities.From strategy to execution, the Government & Public Sector practice of Ernst & Young LLP provides a full range of consulting and audit services to help our Federal, State, Local and Education clients implement new ideas to help achieve their mission outcomes. We deliver real change and measurable results through our diverse, high-performing teams, quality work at the highest professional standards, operational know-how from across our global organization, and creative and bold ideas that drive innovation.The opportunityWhen you're on our GPS team, you'll have the opportunity to work across disciplines with professionals who have broad industry sector experience and deep subject-matter knowledge. In GPS, our growth strategy focuses on being account-centric, issue-based and competency-driven. That's what differentiates EY GPS in the government marketplace.As a member of our GPS team, you will join a talented group of professionals serving in key roles advising U.S. federal agencies addressing issues in performance improvement, program effectiveness, audit and audit readiness, financial management, and Technology Risk.Your key responsibilitiesAs a member of our Technology Risk (IT Audit) team, you will serve as a key resource in delivering quality client services on financial statement audits, attestation engagements and IT control projects. You will conduct research as needed, assist in the testing of IT general and application controls, prepare for and potentially lead client meetings, establish relationships with client personnel at the appropriate levels, and deepen sector and client knowledge.Some key capabilities you should be prepared to bring to client-facing and internal teams include:Demonstrate working knowledge and aptitude in our key capabilities for example, IT general and application controls, risk management, information security, and information assurance.Take a practical approach to solving issues and gaining client agreement.Collaborate among team members; promote an inclusive working environment.To qualify for the role, you must have the following:Bachelor's degree in Business, Accounting, Finance, Information Systems, Information Technology or closely related field.Must be able to obtain and maintain a Secret-level clearance or higher.3+ years of relevant experience in information assurance, information security, risk management, IT and application controls, leading standards (e.g., COSO, ERM, FISCAM, FISMA, NIST), IT technologies (e.g., Windows, UNIX, Oracle, Mainframe, SAP), preparing written or verbal materials, and assisting with presenting project results to clients.Participated in relevant audit/control testing engagement (e.g., CFO Act/FISCAM, OMB Circular A-123 internal control over financial reporting/Systems (ICOFR/ICOFS) assessments, audit readiness (DOD FIAR), ATC-320 SOC-1 Examinations (SSAE-18), and FISMA security reviews/implementations.Possess an understanding of IT technical security controls (e.g. NIST 800 series requirements, DOD Security Technical Implementation Guides (STIGS)), FIPS guidance, and Federal IT audit/examination methodologies (e.g. GAO FISCAM, Financial Audit Manual (FAM), and NIST RMF Assessment and Authorization).Experience in completing Control testing over financial system controls compliance, IT general and application controls, and information assurance controls in areas of information assurance, access control, change control, segregation of duties and disaster recovery.The Government and Public Sector Practice’s staffing model is to assign resources to projects aligned to the office within the metropolitan area you have been hired; however, in certain circumstances, travel may be required within and/or beyond your geographic region based on client and project needs. For roles within the federal practice, the flexibility to travel up to approximately 30% is preferred. Within the state, local and education practice, the flexibility to travel up to approximately 80% is preferred.Ideally, you’ll also have:Experience working on large, complex engagements within the Government and Public Sector.Worked in a Big Four, global management consulting firm or blue-chip company, preferably with a government and public sector focus.Strong analytical and problem-solving skills.Ability to collaborate with clients and identify engagement follow-on opportunities.Excellent verbal and written communication skills.Preferred Certification:Certified Information Systems Auditor (CISA).Certified Information Systems Security Professional (CISSP).What we offer:Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.If you can demonstrate that you meet the criteria above, please contact us as soon as possible.
#J-18808-Ljbffr
At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better. Join us and build an exceptional experience for yourself, and a better working world for all.The exceptional EY experience. It's yours to build. EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities.From strategy to execution, the Government & Public Sector practice of Ernst & Young LLP provides a full range of consulting and audit services to help our Federal, State, Local and Education clients implement new ideas to help achieve their mission outcomes. We deliver real change and measurable results through our diverse, high-performing teams, quality work at the highest professional standards, operational know-how from across our global organization, and creative and bold ideas that drive innovation.The opportunityWhen you're on our GPS team, you'll have the opportunity to work across disciplines with professionals who have broad industry sector experience and deep subject-matter knowledge. In GPS, our growth strategy focuses on being account-centric, issue-based and competency-driven. That's what differentiates EY GPS in the government marketplace.As a member of our GPS team, you will join a talented group of professionals serving in key roles advising U.S. federal agencies addressing issues in performance improvement, program effectiveness, audit and audit readiness, financial management, and Technology Risk.Your key responsibilitiesAs a member of our Technology Risk (IT Audit) team, you will serve as a key resource in delivering quality client services on financial statement audits, attestation engagements and IT control projects. You will conduct research as needed, assist in the testing of IT general and application controls, prepare for and potentially lead client meetings, establish relationships with client personnel at the appropriate levels, and deepen sector and client knowledge.Some key capabilities you should be prepared to bring to client-facing and internal teams include:Demonstrate working knowledge and aptitude in our key capabilities for example, IT general and application controls, risk management, information security, and information assurance.Take a practical approach to solving issues and gaining client agreement.Collaborate among team members; promote an inclusive working environment.To qualify for the role, you must have the following:Bachelor's degree in Business, Accounting, Finance, Information Systems, Information Technology or closely related field.Must be able to obtain and maintain a Secret-level clearance or higher.3+ years of relevant experience in information assurance, information security, risk management, IT and application controls, leading standards (e.g., COSO, ERM, FISCAM, FISMA, NIST), IT technologies (e.g., Windows, UNIX, Oracle, Mainframe, SAP), preparing written or verbal materials, and assisting with presenting project results to clients.Participated in relevant audit/control testing engagement (e.g., CFO Act/FISCAM, OMB Circular A-123 internal control over financial reporting/Systems (ICOFR/ICOFS) assessments, audit readiness (DOD FIAR), ATC-320 SOC-1 Examinations (SSAE-18), and FISMA security reviews/implementations.Possess an understanding of IT technical security controls (e.g. NIST 800 series requirements, DOD Security Technical Implementation Guides (STIGS)), FIPS guidance, and Federal IT audit/examination methodologies (e.g. GAO FISCAM, Financial Audit Manual (FAM), and NIST RMF Assessment and Authorization).Experience in completing Control testing over financial system controls compliance, IT general and application controls, and information assurance controls in areas of information assurance, access control, change control, segregation of duties and disaster recovery.The Government and Public Sector Practice’s staffing model is to assign resources to projects aligned to the office within the metropolitan area you have been hired; however, in certain circumstances, travel may be required within and/or beyond your geographic region based on client and project needs. For roles within the federal practice, the flexibility to travel up to approximately 30% is preferred. Within the state, local and education practice, the flexibility to travel up to approximately 80% is preferred.Ideally, you’ll also have:Experience working on large, complex engagements within the Government and Public Sector.Worked in a Big Four, global management consulting firm or blue-chip company, preferably with a government and public sector focus.Strong analytical and problem-solving skills.Ability to collaborate with clients and identify engagement follow-on opportunities.Excellent verbal and written communication skills.Preferred Certification:Certified Information Systems Auditor (CISA).Certified Information Systems Security Professional (CISSP).What we offer:Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next.Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs.Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.If you can demonstrate that you meet the criteria above, please contact us as soon as possible.
#J-18808-Ljbffr