Manager - Technology Risk - Assurance - Toronto

Manager - Technology Risk - Assurance - TorontoLocation: Toronto
Other locations: Primary Location Only
Date: Oct 20, 2026
Requisition ID: 1754372
At EY, we're all in to shape your future with confidence.
We'll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.
Join EY and help to build a better working world.
The opportunity
EY is seeking a Manager to join our Technology Risk team. This professional will manage engagement teams, as well as directly assist clients in employing information systems, resources, and controls to maximize efficiencies and minimize risk. The successful candidate will also work with client personnel to analyze, evaluate, and enhance information systems facilitating the business internal control process, and will assist clients and other IT professionals in performing information technology (IT) control and security engagements.
This professional will also be expected to interact with other members of the core Assurance and Business Consulting service lines and potentially touch upon topics such as cyber security, IT risk assessments, privacy assessments, technology selections and implementations, data analysis and many other issues our clients deal with.
This job posting relates to an existing vacancy within our organization.
Your key responsibilities
External audits: Oversee engagements to test and opine on efficacy of IT general controls (ITGCs) and IT application controls (ITACs) to support financial statement audits / integrated audits (Internal Controls for Financial Reporting)
Internal audits/SOX compliance testing: assist clients in designing and implementing ITGCs and ITACs to support SOX compliance. Assist testing of ITGCs and ITACs to confirm efficacy of controls. Lead internal audit / assessment engagements for clients to help confirm alignment with leading cybersecurity practices (NIST CSF, ISO 27001, etc.)
Service organization reporting - Focus on the issuance of third-party reports in the form of 3416 reports, SOC 1, SOC 2 reports, etc.
Provide high-quality professional day-to-day management of internal/external audit engagements/projects and understand EY’s practices and broader service offerings and identify potential opportunities to improve such service offerings
Lead and support on-site coordination role for clients including planning, briefing team on the client's IT environment and industry IT trends, communicating with the clients and completing audit engagements
Maintain relationships with client management to manage expectations of service, including work products, timing, and the value to be delivered.
Prepare IT reports on the adequacy and effectiveness of control structure, along with practical recommendations to improve the effectiveness, efficiency of a control or process.
Able to discuss and resolve audit issues and recommendations with client management.
Demonstrate a thorough understanding of complex information systems and apply it to client situations
Lead and provide relevant support to the teams of senior consultants and consultants, including delivering formal IT Audit related trainings.
Maintain long-term client relationships and networks as well as cultivate business development opportunities.
Support the growth and delivery of the Technology Risk practice by identifying client needs, developing technology risk and controls solutions, and collaborating with Assurance and other EY teams on new and evolving reporting requirements.
Manage engagement quality, economics, timelines, and risks, ensuring deliverables align with EY methodology and client expectations.
Build trusted relationships with client executives and key stakeholders, providing practical insights on technology risks, control gaps, and remediation priorities.
Identify and develop new business opportunities by connecting client needs with EY’s broader assurance, technology risk, and consulting capabilities.
Coach and develop Senior and Staff through effective delegation, timely feedback, technical guidance, and on-the-job learning.
Contribute to the evolution of the Technology Risk practice through innovation, market-facing initiatives, methodology development, and adoption of data and AI-enabled approaches.
Skills and attributes for success
Highly professional with ability to work in challenging, diverse and evolving client environments
Flexible with the ability to learn quickly and leverage skills in new situations
Excellent verbal and written communication skills
The ability to build strong client relationships
Strong team working skills are essential
Strong presentation and facilitation skills
A passion to contribute to the growth of the practice
Strong experience interacting with clients at all levels including Staff, Leadership and Partners Strong written, communication, and presentation skills.
Ability to coach and mentor junior staff on engagements.
Ideally, you'll also have
Bachelor’s Degree (or higher) in Business Administration, Commerce, Computer Science, Management Information Systems, or other relevant program required.
A minimum of 5 years of direct operational IT risk experience or technical knowledge of IT-related assessments or audits (e.G., Internal Controls for Financial Reporting, SOX, SOC reporting)
Relevant professional designation, such as CISA, CPA, CIA, CISSP, CISM, or eligible to obtain relevant designation
Comprehensive knowledge of internal auditing standards and techniques;
Strong analytical, interpersonal and communication skills;
Demonstrated consistency in values, principles and work ethic;
Proficiency using MS Office Suite including Excel, Word, OneNote and PowerPoint
Demonstrated integrity, values, principles, and work ethic
Big 4 / IT risk consulting experience will be considered an asset
Demonstrated knowledge of ERP platforms such as SAP, Oracle, etc. would be an asset
What we look for
As an ambassador for the Technology Risk team, you will need to build a strong network internally and be able to exceed our clients' high expectations. We are seeking high-performing individuals who have been recognized for exceeding expectations. We're interested in highly motivated, talented individuals who demonstrate curiosity, a willingness to learn, and a strong ability to think outside the box. You can expect plenty of autonomy in this role, so you'll need the motivation to take initiative, embrace data and AI-enabled ways of working, and seek out opportunities to improve our current relationships and expand our business in the evolving market. If you're ready to take on some of our clients' most complex technology risk and assurance issues, this role is for you.
What we offer you
We offer a competitive compensation package where you'll be rewarded based on your performance and recognized for the value you bring to our business. In addition, our Total Rewards package allows you decide which benefits are right for you and which ones help you create a solid foundation for your future. Our Total Rewards package includes a discretionary bonus program, a comprehensive medical, prescription drug and dental coverage plan, a defined contribution pension plan, a great vacation policy plus firm paid days that allow you to enjoy longer long weekends throughout the year, statutory holidays and paid personal days (based on province of residence), and a range of exciting programs and benefits designed to support your physical, financial and social well-being. Plus, we offer:
Support and coaching from some of the most engaging colleagues in the industry
Learning opportunities to develop new skills and progress your career
The freedom and flexibility to handle your role in a way that's right for you
EY reports salary ranges in accordance with applicable provincial pay transparency legislation. Individual salaries within the anticipated salary ranges noted below are determined through a wide variety of factors including but not limited to internal equity, education, relevant experience, knowledge, and applicable skill sets.
Toronto: $100,000 to $140,000
#J-18808-Ljbffr