EY - Controls Assurance & Operational Resilience Engineer - ServiceNow IRC/GRC

Resilience Testing Support:- Support the design and execution of structured resilience testing, including scenario-based testing aligned to regulatory expectations (e.g., operational resilience, DORA principles).- Assist in validating control effectiveness in disruption scenarios, including coordination across technology and operational teams.- Contribute to testing of critical service dependencies, including technology components and third-party services where applicable.- Support documentation and reporting of resilience testing outcomes and identified gaps.Controls Assurance & Governance:- Own and govern control onboarding across business and technology functions, ensuring controls are accurately designed, mapped, and maintained within ServiceNow IRM.- Define and enforce standards for control descriptions, mappings, and evidence sufficiency to ensure audit- and regulator-defensible outcomes.- Maintain data quality, integrity, and consistency of compliance content within Enterprise GRC tooling, ensuring traceability and reporting accuracy.- Support risk-based prioritisation of control coverage, identifying gaps and driving remediation actions.Testing Lifecycle & Assurance Execution:- Support oversight and assurance over control attestations, evidence validation, and issue tracking.- Establish consistent approaches to testing, including definition of testing standards, evidence expectations, and documentation quality.- Coordinate with control owners and stakeholders to ensure timely completion of assessments and resolution of identified deficiencies.- Maintain oversight of continuous assessment activities and compliance monitoring.Audit & Regulatory Engagement:- Support audit and regulatory interactions, including preparation of responses, evidence collation, and issue clarification.- Apply judgement in addressing challenges raised by auditors on control design, coverage, and testing outcomes.- Track and support remediation of audit findings, ensuring closure is timely and evidentially robust.Reporting, Analytics & Automation:- Support development and maintenance of compliance and assurance reporting (e.g., Power BI dashboards, alerts, management reporting).- Identify opportunities for automation and process optimisation to reduce manual effort and improve scalability of assurance processes.- Ensure alignment between data sources, reporting outputs, and control records within GRC systems.Stakeholder Engagement & Enablement:- Engage with Technology policy leads, control owners, and business stakeholders to resolve interpretation issues and drive consistent application of standards.- Provide guidance and training to stakeholders on control expectations, testing requirements, and system usage.- Drive adherence to governance processes and support escalation of risks, issues, and non-compliance.Skills and experience:- Over 810 years experience in risk management, controls assurance, or compliance within enterprise or regulated environments.- Experience managing Business Continuity and Scenario Testing executions is add on.- Strong hands-on experience with ServiceNow IRM or equivalent GRC tooling, including control frameworks, data management, and reporting.- Understanding of control testing methodologies and assurance practices, including evidence evaluation and issue management.- Exposure to regulatory frameworks and resilience concepts (e.g., operational resilience, DORA, technology risk standards).- Experience in assurance reporting and analytics, including Power BI or equivalent tools.- Ability to work with and influence stakeholders across business and technology teams.- Strong analytical capability with attention to detail and focus on data quality and consistency.- Good written and verbal communication skills, with ability to explain control and compliance concepts clearly. (ref:hirist.tech)