Technology Risk Manager, Assurance
2026-07-22T07:08:31+00:00
EY Malawi
https://www.greatmalawijobs.com/jsjobsdata/data/employer/comp_5328/logo/EY%20Malawi.jpeg
https://www.ey.com/en_mw
FULL_TIME
Lilongwe
Lilongwe
10101
Malawi
Professional Services
Management, Computer & IT, Business Operations
2026-07-31T17:00:00+00:00
8
At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.
Our Technology Risk Assurance team supports clients by providing independent, risk-based assurance services, including IT General Controls reviews, internal technology audits, technology risk assessments, governance reviews and control assurance over complex technology environments, including on-premises, cloud and hybrid systems.
The opportunity
As a Manager, you will lead multiple client engagement teams from planning through to reporting, with responsibility for quality delivery, stakeholder engagement, team supervision and practical risk-based recommendations. Engagements may include internal IT audit, ITGC assessments, IT governance reviews, IT risk and compliance reviews, financial statement audit support, security and controls reviews and data analytics-enabled audit procedures.
You will work closely with clients to understand their technology environments, assess key risks, evaluate control design and operating effectiveness, and present clear, well-supported findings to senior stakeholders.
Responsibilities or duties
Your key responsibilities
- Lead and manage internal IT audit and technology assurance engagements end-to-end, including planning, execution, review and reporting.
- Oversee ITGC assessments across user access management, change management, IT operations, backups, job monitoring, incident management and related control areas.
- Evaluate IT governance, risk management and control frameworks, including alignment to relevant standards and frameworks.
- Assess control design and operating effectiveness across complex IT environments, including on-premises, cloud and hybrid systems.
- Review audit workpapers, findings, risk ratings and reports to ensure accuracy, completeness, quality and alignment with EY methodology and professional standards.
- Present audit findings, risks and practical remediation recommendations to senior client stakeholders in a clear, credible and business-focused manner.
- Manage client relationships, expectations, deliverables, timelines and engagement budgets across multiple assignments.
- Coach, review and develop junior team members and Seniors, while fostering a collaborative, high-performance and quality-focused team environment.
- Contribute to practice development through proposals, internal initiatives, knowledge sharing, methodology improvements and identifying opportunities to connect clients with relevant EY services.
Qualifications or requirements
Skills and attributes for success
- Strong audit mindset, professional scepticism, attention to detail and commitment to quality.
- Ability to assess technology risk, understand complex IT environments and translate technical issues into business-relevant insights.
- Strong leadership, coaching and team management capability, with the confidence to guide engagement teams and review technical deliverables.
- Excellent stakeholder engagement, written and verbal communication skills, including the ability to present findings to senior management.
- Strong project management skills, with the ability to manage multiple engagements, competing priorities and tight deadlines.
- Business awareness, curiosity, resilience and a growth mindset, with the drive to contribute to a growing Technology Assurance practice.
Qualifications and requirements
- Bachelor’s degree in Information Systems, Accounting or a related field.
- CISA certification is a key requirement for this role.
- CISSP certification will be an added advantage.
- At least 5 years’ relevant experience in technology audit, risk, assurance, consulting or a related industry role, preferably within professional services or a regulated environment.
- Strong experience in ITGCs, including access management, change management, IT operations, incident management, backups and job monitoring.
- Experience managing audit engagements, reviewing deliverables and supervising teams.
- Knowledge of IT governance, IT service management, and technology risk and control frameworks relevant to assurance engagements.
- Exposure to ERP security and controls reviews, data analytics in audit, cloud control assurance or regulated industries, especially financial services, will be advantageous.
- Ability to build trusted client relationships, manage a portfolio of engagements and identify opportunities to expand value for clients.
Any other provided details
What we offer
At EY, you will develop future-focused skills, gain exposure to diverse clients and industries, work with leading audit methodology and digital tools, and build a meaningful career within a globally connected professional services network. This is an opportunity to deepen your expertise in technology assurance, risk and governance while leading teams, influencing clients and contributing to our Technology Assurance capability.
* Lead and manage internal IT audit and technology assurance engagements end-to-end, including planning, execution, review and reporting. * Oversee ITGC assessments across user access management, change management, IT operations, backups, job monitoring, incident management and related control areas. * Evaluate IT governance, risk management and control frameworks, including alignment to relevant standards and frameworks. * Assess control design and operating effectiveness across complex IT environments, including on-premises, cloud and hybrid systems. * Review audit workpapers, findings, risk ratings and reports to ensure accuracy, completeness, quality and alignment with EY methodology and professional standards. * Present audit findings, risks and practical remediation recommendations to senior client stakeholders in a clear, credible and business-focused manner. * Manage client relationships, expectations, deliverables, timelines and engagement budgets across multiple assignments. * Coach, review and develop junior team members and Seniors, while fostering a collaborative, high-performance and quality-focused team environment. * Contribute to practice development through proposals, internal initiatives, knowledge sharing, methodology improvements and identifying opportunities to connect clients with relevant EY services.
* Strong audit mindset, professional scepticism, attention to detail and commitment to quality. * Ability to assess technology risk, understand complex IT environments and translate technical issues into business-relevant insights. * Strong leadership, coaching and team management capability, with the confidence to guide engagement teams and review technical deliverables. * Excellent stakeholder engagement, written and verbal communication skills, including the ability to present findings to senior management. * Strong project management skills, with the ability to manage multiple engagements, competing priorities and tight deadlines. * Business awareness, curiosity, resilience and a growth mindset, with the drive to contribute to a growing Technology Assurance practice.
* Bachelor’s degree in Information Systems, Accounting or a related field. * CISA certification is a key requirement for this role. * CISSP certification will be an added advantage. * At least 5 years’ relevant experience in technology audit, risk, assurance, consulting or a related industry role, preferably within professional services or a regulated environment. * Strong experience in ITGCs, including access management, change management, IT operations, incident management, backups and job monitoring. * Experience managing audit engagements, reviewing deliverables and supervising teams. * Knowledge of IT governance, IT service management, and technology risk and control frameworks relevant to assurance engagements. * Exposure to ERP security and controls reviews, data analytics in audit, cloud control assurance or regulated industries, especially financial services, will be advantageous. * Ability to build trusted client relationships, manage a portfolio of engagements and identify opportunities to expand value for clients.
JOB-6a606c6f65ff9
Vacancy title:
Technology Risk Manager, Assurance
[Type: FULL_TIME, Industry: Professional Services, Category: Management, Computer & IT, Business Operations]
Jobs at:
EY Malawi
Deadline of this Job:
Friday, July 31 2026
Duty Station:
Lilongwe | Lilongwe
Summary
Date Posted: Wednesday, July 22 2026, Base Salary: Not Disclosed
Similar Jobs in Malawi
Learn more about EY Malawi
EY Malawi jobs in Malawi
JOB DETAILS:
At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.
Our Technology Risk Assurance team supports clients by providing independent, risk-based assurance services, including IT General Controls reviews, internal technology audits, technology risk assessments, governance reviews and control assurance over complex technology environments, including on-premises, cloud and hybrid systems.
The opportunity
As a Manager, you will lead multiple client engagement teams from planning through to reporting, with responsibility for quality delivery, stakeholder engagement, team supervision and practical risk-based recommendations. Engagements may include internal IT audit, ITGC assessments, IT governance reviews, IT risk and compliance reviews, financial statement audit support, security and controls reviews and data analytics-enabled audit procedures.
You will work closely with clients to understand their technology environments, assess key risks, evaluate control design and operating effectiveness, and present clear, well-supported findings to senior stakeholders.
Responsibilities or duties
Your key responsibilities
- Lead and manage internal IT audit and technology assurance engagements end-to-end, including planning, execution, review and reporting.
- Oversee ITGC assessments across user access management, change management, IT operations, backups, job monitoring, incident management and related control areas.
- Evaluate IT governance, risk management and control frameworks, including alignment to relevant standards and frameworks.
- Assess control design and operating effectiveness across complex IT environments, including on-premises, cloud and hybrid systems.
- Review audit workpapers, findings, risk ratings and reports to ensure accuracy, completeness, quality and alignment with EY methodology and professional standards.
- Present audit findings, risks and practical remediation recommendations to senior client stakeholders in a clear, credible and business-focused manner.
- Manage client relationships, expectations, deliverables, timelines and engagement budgets across multiple assignments.
- Coach, review and develop junior team members and Seniors, while fostering a collaborative, high-performance and quality-focused team environment.
- Contribute to practice development through proposals, internal initiatives, knowledge sharing, methodology improvements and identifying opportunities to connect clients with relevant EY services.
Qualifications or requirements
Skills and attributes for success
- Strong audit mindset, professional scepticism, attention to detail and commitment to quality.
- Ability to assess technology risk, understand complex IT environments and translate technical issues into business-relevant insights.
- Strong leadership, coaching and team management capability, with the confidence to guide engagement teams and review technical deliverables.
- Excellent stakeholder engagement, written and verbal communication skills, including the ability to present findings to senior management.
- Strong project management skills, with the ability to manage multiple engagements, competing priorities and tight deadlines.
- Business awareness, curiosity, resilience and a growth mindset, with the drive to contribute to a growing Technology Assurance practice.
Qualifications and requirements
- Bachelor’s degree in Information Systems, Accounting or a related field.
- CISA certification is a key requirement for this role.
- CISSP certification will be an added advantage.
- At least 5 years’ relevant experience in technology audit, risk, assurance, consulting or a related industry role, preferably within professional services or a regulated environment.
- Strong experience in ITGCs, including access management, change management, IT operations, incident management, backups and job monitoring.
- Experience managing audit engagements, reviewing deliverables and supervising teams.
- Knowledge of IT governance, IT service management, and technology risk and control frameworks relevant to assurance engagements.
- Exposure to ERP security and controls reviews, data analytics in audit, cloud control assurance or regulated industries, especially financial services, will be advantageous.
- Ability to build trusted client relationships, manage a portfolio of engagements and identify opportunities to expand value for clients.
Any other provided details
What we offer
At EY, you will develop future-focused skills, gain exposure to diverse clients and industries, work with leading audit methodology and digital tools, and build a meaningful career within a globally connected professional services network. This is an opportunity to deepen your expertise in technology assurance, risk and governance while leading teams, influencing clients and contributing to our Technology Assurance capability.
Work Hours: 8
Experience in Months: 60
Level of Education: bachelor degree
Job application procedure
Application Link:Click Here to Apply Now
All Jobs | QUICK ALERT SUBSCRIPTION
