Technology Risk Manager, Assurance

About the role

EY is seeking a Technology Risk Manager to lead assurance engagements for clients in Malawi. You will guide teams through the full audit lifecycle, delivering risk‑based insights on complex IT environments and helping senior stakeholders understand and mitigate technology risks.

Key responsibilities

• Lead and manage internal IT audit and technology assurance engagements end‑to‑end, from planning to reporting.
• Oversee ITGC assessments across user access, change management, operations, backups, job monitoring and incident management.
• Evaluate IT governance, risk management and control frameworks against relevant standards.
• Assess control design and operating effectiveness in on‑premises, cloud and hybrid systems.
• Review audit workpapers, findings, risk ratings and reports to ensure quality and compliance with EY methodology.
• Present audit findings and practical remediation recommendations to senior client stakeholders.
• Manage client relationships, expectations, timelines and budgets across multiple assignments.
• Coach and develop junior and senior team members, fostering a collaborative, high‑performance environment.
• Contribute to practice development through proposals, knowledge sharing and methodology improvements.

Required profile

• Strong audit mindset with professional scepticism and meticulous attention to detail.
• Ability to assess technology risk and translate technical issues into business‑relevant insights.
• Proven leadership, coaching and team‑management capabilities.
• Excellent communication and presentation skills for senior stakeholders.
• Commitment to delivering high‑quality, risk‑based recommendations.

Required skills

• ITGC assessments
• IT governance frameworks
• Cloud and hybrid system auditing
• Data‑analytics‑enabled audit procedures