Risk Consulting

Join EY's Risk Consulting team in Kolkata as a Senior in Digital Risk specializing in IT Controls. In this role, you will deliver quality client services, manage engagement risks, and ensure timely, budget-conscious delivery of high-quality work products. You will foster strong client relationships by analyzing, evaluating, and enhancing information systems to improve security at both procedural and technology levels. Staying abreast of current IT environments and industry trends is crucial for identifying engagement and client service issues, which you will communicate effectively through written correspondence and verbal presentations to engagement teams and client management.

You will leverage your proven track record in IT Audit, with a focus on the assessment, design, and implementation support of controls, security, and IT risk solutions. Responsibilities include designing IT Risk Control frameworks (e.g., IT SOX), implementing and testing internal controls (e.g., IT general controls, application controls, IPE controls, interface controls), identifying control gaps, and conducting IT internal control reviews, including SOC1 or SOC2 reports. Familiarity with IT risk, information security, or cybersecurity frameworks such as COSO, COBIT, ISO, NIST is required. Experience with IT Compliance and regulatory assessments, including exposure to technologies like SAP, Oracle, Workday, MS Dynamics, Cloud, RPA, or AI/ML, is also essential. You will conduct IT infrastructure and architecture risk assessments, including data quality, data migration, data privacy, OS, and DB reviews. Strong client-facing experience, collaboration with cross-functional teams (internal audit, IT security, business stakeholders), and excellent communication, documentation, and report writing skills are key to success. Relevant industry certifications such as CISA, CISM, CISSP, CRISC, CCSK, ISO 27001 are considered a strong asset.