EY - Controls Assurance & Operational Resilience Engineer - ServiceNow IRC/GRC (8-13 yrs)

Resilience Testing Support:

- Support the design and execution of structured resilience testing, including scenario-based testing aligned to regulatory expectations (e.g., operational resilience, DORA principles).

- Assist in validating control effectiveness in disruption scenarios, including coordination across technology and operational teams.

- Contribute to testing of critical service dependencies, including technology components and third-party services where applicable.

- Support documentation and reporting of resilience testing outcomes and identified gaps.

Controls Assurance & Governance:

- Own and govern control onboarding across business and technology functions, ensuring controls are accurately designed, mapped, and maintained within ServiceNow IRM.

- Define and enforce standards for control descriptions, mappings, and evidence sufficiency to ensure audit- and regulator-defensible outcomes.

- Maintain data quality, integrity, and consistency of compliance content within Enterprise GRC tooling, ensuring traceability and reporting accuracy.

- Support risk-based prioritisation of control coverage, identifying gaps and driving remediation actions.

Testing Lifecycle & Assurance Execution:

- Support oversight and assurance over control attestations, evidence validation, and issue tracking.

- Establish consistent approaches to testing, including definition of testing standards, evidence expectations, and documentation quality.

- Coordinate with control owners and stakeholders to ensure timely completion of assessments and resolution of identified deficiencies.

- Maintain oversight of continuous assessment activities and compliance monitoring.

Audit & Regulatory Engagement:

- Support audit and regulatory interactions, including preparation of responses, evidence collation, and issue clarification.

- Apply judgement in addressing challenges raised by auditors on control design, coverage, and testing outcomes.

- Track and support remediation of audit findings, ensuring closure is timely and evidentially robust.

Reporting, Analytics & Automation:

- Support development and maintenance of compliance and assurance reporting (e.g., Power BI dashboards, alerts, management reporting).

- Identify opportunities for automation and process optimisation to reduce manual effort and improve scalability of assurance processes.

- Ensure alignment between data sources, reporting outputs, and control records within GRC systems.

Stakeholder Engagement & Enablement:

- Engage with Technology policy leads, control owners, and business stakeholders to resolve interpretation issues and drive consistent application of standards.

- Provide guidance and training to stakeholders on control expectations, testing requirements, and system usage.

- Drive adherence to governance processes and support escalation of risks, issues, and non-compliance.

Skills and experience:

- Over 810 years experience in risk management, controls assurance, or compliance within enterprise or regulated environments.

- Experience managing Business Continuity and Scenario Testing executions is add on.

- Strong hands-on experience with ServiceNow IRM or equivalent GRC tooling, including control frameworks, data management, and reporting.

- Understanding of control testing methodologies and assurance practices, including evidence evaluation and issue management.

- Exposure to regulatory frameworks and resilience concepts (e.g., operational resilience, DORA, technology risk standards).

- Experience in assurance reporting and analytics, including Power BI or equivalent tools.

- Ability to work with and influence stakeholders across business and technology teams.

- Strong analytical capability with attention to detail and focus on data quality and consistency.

- Good written and verbal communication skills, with ability to explain control and compliance concepts clearly.