> Markdown version of [/jobs/ext/4211277-government-and-infrastructure-assurance-technology-risk-ma](https://www.wearedevelopers.com/jobs/ext/4211277-government-and-infrastructure-assurance-technology-risk-ma). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Government and Infrastructure - Assurance - Technology Risk- Ma

- **Company:** Ernst & Young LLP
- **Location:** McLean, VA, United States
- **Experience:** Expert
- **Salary:** $134,000.0 - $223,300.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Unix, Cyber Security, Information Systems, Disaster Recovery, Federal Information Processing Standards (FIPS), Information Technology Audit, Information Systems Security Architecture Professional, Mainframes, Oracle (Applications), SAP (Applications), Information Technology
- **Published:** October 26, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9267977/government-and-infrastructure-assurance-technology-risk-ma

## About the Role

Some key capabilities you should be prepared to bring to client-facing and internal teams include:

 * Demonstrate working knowledge and aptitude in our key capabilities for example, IT general and application controls, risk management, information security, and information assurance
 * Take a practical approach to solving issues and gaining client agreement
 * Collaborate among team members; promote an inclusive working environment

To qualify for the role you must have

 * Bachelor's degree in Business, Accounting, Finance, Information Systems, Information Technology or closely related field
 * 5+ Years of relevant experience in information assurance, information security, risk management, leading standards (e.g., COSO, ERM, FISCAM, FISMA, NIST), IT technologies (e.g., Windows, UNIX, Oracle, Mainframe, SAP), preparing written or verbal materials, and assisting with presenting project results to clients
 * Participated in planning through reporting phases and oversaw the execution of relevant audit/control testing engagement (e.g., CFO Act/FISCAM, OMB Circular A-123 internal control over financial reporting/Systems (ICOFR/ICOFS), audit readiness (DOD FIAR), ATC-320 SOC-1 Examinations (SSAE-18), and FISMA security implementations and/or OIG FISMA security reviews based on DHS cyberscope metrics)
 * Possess a strong understanding of IT technical security controls (e.g. NIST 800 series requirements, DOD Security Technical Implementation Guides (STIGS)), FIPS guidance, and Federal IT audit/examination methodologies (e.g. GAO FISCAM, Financial Audit Manual (FAM), and NIST RMF Assessment and Authorization).
 * Experience in overseeing and completing Control testing over financial system controls compliance, IT general and application controls, and information assurance controls in areas of information assurance, access control, change control, segregation of duties and disaster recovery.
 * Must be able to obtain and maintain a Secret-level clearance or higher.
 * Willingness to travel 20 - 30% or more. Due to the nature of our work in the Government and Infrastructure, work may be required to be completed at client, EY and/or contractor sites. Our goal is to assign professionals to projects within a commutable distance of their work location office. In certain circumstances, travel may be required beyond your work location based on client and project needs.

Ideally you'll also have

 * Experience executing project plans on large, complex engagements from analysis through implementation
 * Worked in a Big Four, global management consulting firm or blue-chip company, preferably with a Government and Infrastructure focus
 * Strong analytical and problem-solving skills
 * Ability to collaborate with clients and identify engagement follow-on opportunities
 * Preferred Certification

 * Certified Information Systems Auditor (CISA)
 * Certified Information Systems Security Professional (CISSP)

## Description

As a member of our Technology Risk (IT Audit) team, you will serve as a key resource in delivering quality client services on financial statement audits, attestation engagements and IT control projects. You will conduct research as needed, assist in the testing of IT general and application controls, prepare for and potentially lead client meetings, establish relationships with client personnel at the appropriate levels, and deepen sector and client knowledge.