Associate / Senior Associate IT Audit: Johannesburg/ Cape Town / Durban

EY is a global leader in assurance, tax, transaction and advisory services. The insights and quality services we deliver help build trust and confidence in the capital markets and in economies the world over. We develop outstanding leaders who team to deliver on our promises to all of our stakeholders. In so doing, we play a critical role in building a better working world for our people, for our clients and for our communities. EY refers to the global organization and may refer to one or more of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients. For more information about our organization, please visit ey.com. EY material on this page has been prepared for general informational purposes only and is not intended to be relied upon as accounting, tax, or other professional advice. Please refer to your advisors for specific advice. In your role as a Risk Assurance Associate, you'll:

Effectively manage and motivate client engagement teams with diverse skills and backgrounds.

Consistently deliver quality client services and manage expectations of client service delivery.

Drive high-quality work products within expected timeframes and on budget.

Monitor progress, manage risk and ensure key stakeholders are kept informed about progress and expected outcomes.

Stay abreast of current business and industry trends relevant to the client's business.

Develop and maintain long-term relationships and networks with clients and internal EY stakeholders - Demonstrate deep technical capabilities and professional knowledge.

Possess in depth business acumen and demonstrate ability to quickly assimilate to new knowledge. - Remain current on new developments in advisory services capabilities and industry knowledge.

Skills and attributes for success

Working experience on at least two (2) full cycles of access control framework definition, security role design, remediation and implementation for ERP solutions such as SAP and Oracle.

Working experience in performing business process controls review, access controls review (e.g., segregation of duties) and project risk assessments in an ERP environment. Having experience in continuous controls monitoring and controls optimization type of work would be an advantage.

In-depth knowledge on key risks and expected controls (including compensating controls) in one or more business processes (e.g., procure to pay, and financial statement close)

Understanding of and/or implementation experience with a variety of GRC tools (e.g., SAP GRC and Oracle ICM)

To qualify for the role, you must have:

A recognized university degree in accounting, business, information technology, engineering, mathematics or other relevant discipline

At least 4 years of relevant consulting or industry experience, preferably in a professional services environment or MNC.

Candidates who possess professional certifications such as Certified Public Accountant (CPA), Certified Internal Auditor (CIA), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP) and / or Certified Fraud Examiner (CFE) are highly encouraged to apply.

Proficiency with Microsoft Excel, Access, Word, and PowerPoint

Strong analytical, interpersonal, communication, writing and presentation skills

Demonstrates integrity, values, principles, and work ethic

Willingness to travel on overseas assignment as the need arises

Ideally, you'll also have

Application Risk & Controls

This practice focuses on enterprise IT application assessment, Governance, Risk and Compliance (GRC) technology assessment, IT Application and Tool Implementation. We deliver valuable insights and enable better business decisions through improved quality of information.