San Antonio - Technology & Security Risk Services - SAP Senior - 00DCK

Within EY's Technology & Security Risk Services (TSRS) practice, the Senior participates in and supervises multiple client engagement teams and other related activities. Engagements focus on the assessment and/or evaluation of IT systems and the mitigation of IT-related business risks. Engagements may be either assurance (attestation) and/or risk advisory in nature, and vary considerably in size and complexity. All of our TSRS services, whether assurance or advisory in nature, are designed for the dual purpose of strengthening internal controls and, in so doing, helping to improve IT and business performance. In addition to assurance-related engagements such as financial attestation and SAS 70 engagements, our IT risk advisory services focus on IT governance and effectiveness; IT program management and assurance; security and controls of ERP implementations; and business intelligence and information analysis. This professional serves as a fieldwork leader to assist clients in employing proper information systems, resources, and controls to maximize efficiencies and minimize risk. The successful candidate will work with client personnel to analyze, evaluate, and enhance information systems facilitating the business internal control process, and will assist clients and other TSRS professionals in performing information technology control and security engagements.ResponsibilitiesCollaborate with other members of the engagement team to plan the engagement and develop work program timelines, risk assessments, and other planning documents. Work with the engagement team to document the business processes dependent on information technology. Serve as a fieldwork leader by directing the daily progress of fieldwork, informing supervisors of engagement status, and managing staff performance. Function as a Subject Matter Expert (SME) in assessing and advising clients on integrating SAP Virsa solutions into the client's ERP environment. Assistance will be towards SoD review, appropriate access definition, process controls automation using Continuous Controls Monitoring methodology, Policy and Procedure toward integrating this solution and supporting the client reviewing emergency access resolution in production. Demonstrate and apply a thorough understanding of complex information systems, specifically deep skills in the SAP environment both using traditional SAP security concepts and SoD concepts along with skills within Virsa modules (Compliance Calibrator, Access Enforcer, FireFighter, Process Controls, etc..... Use knowledge of the current IT environment and industry IT trends to identify the engagement and client service issues, and communicate this information to the engagement team and client management through written correspondence and verbal presentations. Demonstrate and apply strong project management skills, inspire teamwork and responsibility with engagement team members, and use current technology and tools to enhance the effectiveness of deliverables and services. To qualify, candidates must have:a bachelor's or master's degree in business, accounting, finance, computer science, information systems, engineering, or a related discipline a minimum of 2 years of experience working as an IT auditor or IT risk adviser for a public accounting firm, a professional services firm, or within industry a minimum of 18 months of relevant experience would be acceptable for those holding a relevant graduate degree proficiency with ERP controls and security in at least one major ERP package (SAP, Oracle, PeopleSoft) experience with at least two out of the four tools in the SAP Virsa Suite (CC and AE preferred) strong understanding of SAP Basis and Security along with General Module flow experience as well as business processes, risks and application controls significant experience in having applied relevant ERP and business process knowledge in the following engagements: financial statement audits; internal audits; and/or ERP system implementations project management skills strong written and verbal communication skills and presentation skills leadership, teamwork and client service skills demonstrated integrity within a professional environmentCPA, CA, CISA, CISSP, CISM, CBCP, CIA or CFE certification is desired; non-certified hires are required to become certified to be eligible for promotion to Manager. TX-San Antonio