Technology Risk Manager – Assurance (Malawi)

About the role

EY is seeking a Technology Risk Manager to lead assurance engagements across Malawi. You will guide client teams through IT audits, risk assessments, and governance reviews, delivering practical, risk‑based recommendations to senior stakeholders.

Key responsibilities

• Lead end‑to‑end internal IT audit and technology assurance engagements, from planning to reporting.
• Conduct ITGC assessments covering user access, change management, operations, backups, job monitoring and incident management.
• Evaluate IT governance, risk management and control frameworks against relevant standards.
• Assess design and operating effectiveness of controls in on‑premises, cloud and hybrid environments.
• Review workpapers, findings and reports to ensure quality and alignment with EY methodology.
• Present audit findings and remediation recommendations to senior client stakeholders.
• Manage client relationships, expectations, timelines and budgets across multiple assignments.
• Coach and develop junior and senior team members, fostering a collaborative, high‑performance environment.
• Contribute to practice development through proposals, knowledge sharing and methodology improvements.

Required profile

• Strong audit mindset with professional scepticism, attention to detail and commitment to quality.
• Ability to assess technology risk, understand complex IT environments and translate technical issues into business‑relevant insights.
• Proven leadership, coaching and team‑management capabilities.
• Excellent stakeholder communication skills.

Required skills

• IT General Controls (ITGC) assessment.
• IT governance and risk‑management frameworks.
• Experience with on‑premises, cloud and hybrid technology environments.