At EY, we’re all in to shape your future with confidence.
We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.
Join EY and help to build a better working world.
The opportunity
We are looking for a highly motivated Assistant Technology Risk to join our dynamic IT Audit team. You will contribute to IT audit engagements in Luxembourg and abroad, supporting financial audits through IT-related work and delivering advisory services in cybersecurity, IT strategy, business continuity, and regulatory compliance.
This is a fantastic opportunity to grow within a globally connected organization and work on diverse client portfolios across industries.
Your key responsibilities
- Contribute to financial statement audit support by evaluating clients’ IT control environments and developing solutions.
- Act as a stream leader on business consultancy engagements in cybersecurity, IT risk management, and business continuity.
- Analyse client IT environments, identify risks, and evaluate controls.
- Conduct application system analysis of Segregation of Duties (SoD) and Sensitive Access to assess potential conflicts in financial reporting.
- Design and implement IT audits, including systems development, conversion, and application control reviews.
- Perform in-depth control assessments, document test requirements, and suggest remediation alternatives.
- Facilitate the use of technology-based tools and methodologies to review, design, and implement products and services.
Skills and attributes for success
- Master’s degree or equivalent certification in Computer Science, Information Systems, Engineering, or a related field.
- Sound knowledge of IT frameworks and standards such as ITIL, COBIT, ISO 27001, ISO 22301, CMMI.
- Familiarity with data protection and governance regulations (e.g., EU GDPR, DORA, NIS2).
- CISA certification or willingness to obtain it within one year of hire.
- Experience in IT Risk Management and internal control.
- Hands-on experience with operating systems, DBMS, or network administration.
- Fluent in French and English; additional languages are considered an asset.
- Highly organized, flexible, and quick to learn in new situations.
- Proactive in problem-solving with a strong client and team focus.
- Committed to sharing knowledge and improving client processes.
Ideally, you’ll also have:
- Experience in one or more of the following: financial audits, internal/operational audits, ISMS implementation/audit, business continuity management, ERP security and control reviews (Oracle, SAP, MS Dynamics).
- Experience auditing general computer controls and IT control testing of applications, operating systems, and databases.
- Prior experience in project planning and management.
- Additional certifications such as CISM, CGEIT, CRISC, ITIL, CISSP, CIA, ISO 27001/22301 Lead Auditor or Implementer, Prince2, or PMP.
What we offer you
At EY, we’ll develop you with future-focused skills and equip you with world-class experiences. We’ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more.
Are you ready to shape your future with confidence? Apply today.
To help create the best experience during the recruitment process, please describe any disability-related adjustments or accommodations you may need.
EY | Building a better working world
EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.
Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.
EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.
Our offer of employment is contingent upon the successful completion of a background check and pre-screening requirements. The candidate acknowledges that all information provided must be accurate.
