Senior Technology Risk (m/f)

Role Summary

• Senior Technology Risk
• Location: Luxembourg
• Other locations: Primary Location Only
• Salary: Competitive

Requisition ID: 1710118

At EY, we're all in to shape your future with confidence.

We'll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

We are looking for a highly motivated Senior Technology Risk to join our dynamic IT Audit team. You will contribute to IT audit engagements in Luxembourg and abroad, supporting financial audits through IT-related work and delivering advisory services in cybersecurity, IT strategy, business continuity, and regulatory compliance.

This is a fantastic opportunity to grow within a globally connected organization and work on diverse client portfolios across industries.

Responsibilities

• Contribute to financial statement audit support by evaluating clients' IT control environments and developing solutions.
• Act as a stream leader on business consultancy engagements in cybersecurity, IT risk management, and business continuity.
• Analyse client IT environments, identify risks, and evaluate controls.
• Conduct application system analysis of Segregation of Duties (SoD) and Sensitive Access to assess potential conflicts in financial reporting.
• Design and implement IT audits, including systems development, conversion, and application control reviews.
• Perform in-depth control assessments, document test requirements, and suggest remediation alternatives.
• Facilitate the use of technology-based tools and methodologies to review, design, and implement products and services.

Skills and attributes for success

• Master's degree or equivalent certification in Computer Science, Information Systems, Engineering, or a related field.
• Minimum 2 years of experience as an IT Auditor (internal or external), or 3 years as an IT Consultant.
• Sound knowledge of IT frameworks and standards such as ITIL, COBIT, ISO 27001, ISO 22301, CMMI.
• Familiarity with data protection and governance regulations (e.g., EU GDPR, DORA, NIS2).
• CISA certification or willingness to obtain it within one year of hire.
• Experience in IT Risk Management and internal control.
• Hands-on experience with operating systems, DBMS, or network administration.
• Fluent in French and English; additional languages are considered an asset.
• Highly organized, flexible, and quick to learn in new situations.
• Proactive in problem-solving with a strong client and team focus.
• Committed to sharing knowledge and improving client processes.

Ideally, you'll also have

• Experience in one or more of the following: financial audits, internal/operational audits, ISMS implementation/audit, business continuity management, ERP security and control reviews (Oracle, SAP, MS Dynamics).
• Experience auditing general computer controls and IT control testing of applications, operating systems, and databases.
• Prior experience in project planning and management.
• Additional certifications such as CISM, CGEIT, CRISC, ITIL, CISSP, CIA, ISO 27001/22301 Lead Auditor or Implementer, Prince2, or PMP.

What we offer you

• At EY, we'll develop you with future-focused skills and equip you with world-class experiences. We'll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more.
• Are you ready to shape your future with confidence? Apply today.
• To help create the best experience during the recruitment process, please describe any disability-related adjustments or accommodations you may need.

EY | Building a better working world

• EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.
• Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.
• EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.
• Our offer of employment is contingent upon the successful completion of a background check and pre-screening requirements. The candidate acknowledges that all information provided must be accurate.