Risk & Controls Governance Analyst (ET Risk and Compliance)

About the role

EY's Enterprise Technology Risk & Compliance (ETRC) team is hiring a Risk & Controls Governance Analyst (Supervising Associate) in Buenos Aires. Reporting to the Risk & Controls Governance Lead, the analyst supports the day-to-day execution of risk and control governance, control assessment, certification and strategic risk and control initiatives across Enterprise Technology, maintaining risk and control information and providing analysis and governance materials.

Key responsibilities

• Maintain application inventory, control owner and delegate registers, and attestation and certification records.
• Support assessments of applications, processes and technology changes to identify needs for new or updated controls, including IT general controls, SDLC controls and interfaces.
• Perform control gap analysis, document findings and propose practical remediation recommendations.
• Support control rationalization, control impact assessments and analysis of control design or ownership changes.
• Manage assigned project plans and delivery activities, including milestones, actions, risks, issues, approvals and stakeholder communications.
• Prepare governance materials, status packs, ad hoc analysis and trend insights, and escalate recurring control issues.
• Support workflow automation and maintain project and compliance repositories, SharePoint sites, Planner boards and Teams channels.
• Share insights from control assessments and risk investigations with ETRC teams and collaborate with Finance, Assurance & Compliance, Operations & Reporting and Policy & Standards Enablement.

Required profile

• Bachelor's degree in Information Technology, Business, Risk Management, Cybersecurity, Accounting or a related discipline, or equivalent experience.
• Minimum 5 years of experience in technology risk, internal controls, IT audit, compliance, governance, project delivery or a related field.
• Experience supporting RACM maintenance, risk and control assessments, control documentation, certification or remediation.
• Ability to work across technology, risk, audit, information security, privacy and business stakeholder groups in a global environment.

Required skills

• Working knowledge of IT general controls, technology change, access management, SDLC, interfaces and risk management.
• Project coordination: tracking milestones, actions, risks, issues, dependencies and stakeholder deliverables.
• Microsoft 365, SharePoint, Power BI and collaboration platforms; GRC, workflow or RACM tools preferred.
• Experience with AI governance, SAP or ERP transformation, Data Protection, TARP, SDLC or similar is a plus; CISA, CRISC, CISM, CIA, PMP or similar certifications are a plus.