By Andre Atallah, CEO of EP Advisory
Technology Risk Graduate Programme · Great Britain and Northern Ireland · August 2027 or September 2027 start
Open on 17 October 2026. Closes when places fillThis year’s listings have closedCheck each listing for its closing dateOffice full? Your options
Short answer: Apply now. On 15 October 2026, EY’s Technology Risk graduate programme was open in Edinburgh, Glasgow, London, Belfast and Derry/Londonderry. Each listing closes when its places fill.This year’s EY Technology Risk graduate listings have closed. EY closes each listing when its places fill.EY’s Technology Risk graduate programme runs in five offices. Check each listing for its closing date. You fill in a form with no CV, take a job preview and a behavioural skills test, then attend an in-person Experience Day. No technical test is published. Only London sponsors visas.
Applying now?Applying next year?
Pick one office and intake, then fill in the form. Every listing closes when it fills, so take the tests soon after.This year’s listings have closed. Pick one office and intake when the next ones open.Pick one office and intake, then check its listing for the closing date. Take the tests soon after the form. How to apply
Office full or missed it?
Try another office or intake, the Belfast placement or another EY programme. You get one EY application every six months. Your options
Where are you now?
Independent guide. EP Advisory is not affiliated with EY.
EY hires Technology Risk graduates to help “organisations identify and manage the technology risks that matter”. This guide to the EY Technology Risk graduate application process uses EY’s own pages for every date and rule.
This playbook covers all seven listings, including for international students. For nearly 10 years, we’ve helped more than 5,000 professionals get hired. Want to know if your CV will pass screening in the UK? Check your CV for free: a score in 30 seconds, then a fix for each problem.
01/10
Your route to an offer
Pick your stage and tick each step when done. Prep times are our suggestions.
1. Application: open now, closes when filled1. Application (this year’s listings have closed)1. Application: see your listing’s closing date
An online form, with no CV or cover letter. Each listing closes when its places fill, so apply early.This year’s listings have closed. Next year, apply early: each listing closes when its places fill.Check your listing for its closing date, and apply early.
2. Online tests: job preview, then skills test
A Realistic Job Preview, then a behavioural skills test. Both run on Cappfinity’s platform. Prep a few days.
3. Experience Day: in person
A day in an EY office, with group and individual tasks. EY aims to give at least a week’s notice. Prep 1 to 2 weeks.
4. Final step: an interview only if your programme has one
Check your invitation for a final interview. If you have one, it usually comes two to three weeks after the Experience Day.
Your ticks save on this device.
02/10
The role at a glance
Everything you need to decide, on one screen. If EY has not published something, we say so.
7
Listings open, 15 October 2026Listings, all closed this yearListings. See each for its date
2 intakes
Aug 2027 and Sep 2027 starts
2 years
Programme length
No CV
An online form only
In person
EY Experience Day
Competitive
Salary, no figure published
Great Britain: Edinburgh, Glasgow and London
You “work on IT audits and risk engagements”, across areas like “cloud, AI and cybersecurity”. EY lists a “Role-specific qualification” but does not name it.
Northern Ireland: Belfast and Derry/Londonderry
You help clients “safeguard their Business and IT environments”. EY lists “Future-focused skills and training”. You must “remain in Northern Ireland for the entire duration of the programme”.
Where these facts come from
- Listings and pay. EY’s Technology Risk listings, checked 15 October 2026. Each gives a programme length of “Two years” and a salary of “Competitive”. EY’s FAQs add: “We don’t discuss salaries before an offer is made”.
- The work. The Great Britain listings say you will “Analyse risks and controls across areas such as cybersecurity, cloud, data and emerging technologies”. The Northern Ireland listing describes hybrid working: “travelling to client offices, working in the EY office and from home”.
- No CV. “A CV or cover letter is not required for Early Careers applications” (EY’s FAQs).
03/10
What EY Technology Risk looks for
The Great Britain listings name six core skills, in the words below. EY also weighs your A-levels with your online test scores.
Analytical thinking
“Interpret data, systems and control environments to assess risks and generate reliable insights.”
Problem solving
“Identify technology risks and support the development of practical, effective solutions.”
Inclusive collaboration
“Work with diverse teams and stakeholders to evaluate systems and deliver outcomes.”
Critical thinking and judgement
“Assess risks, controls and evidence to form sound conclusions and recommendations.”
Adaptability
“Respond to evolving technologies, regulations and client environments with confidence.”
Digital fluency
“Understand and apply concepts across areas such as cloud, AI, cybersecurity and data.”
The Northern Ireland listing names four: learning agility, a curious mindset, analytical thinking, and digital, data and AI fluency.
EY’s eight skills, used across its hiring
ProactiveDo the right thingCuriousBuild relationshipsAgilityThink criticallyEmbrace technologyMotivated
From EY’s key skills page. No Technology Risk graduate listing names a degree class. EY also uses contextual recruitment, which weighs your socio-economic background.
04/10Stage 1 · Apply
How to apply
Apply now: every listing closes when it fills.This year’s listings have closed.Check your listing for its closing date. EY gives no closing date.EY gave no closing date. Roles close “once positions are filled or if we receive a high volume of applications”.
1
Pick one listing
One EY programme per six months
2
Fill in the form
No CV or cover letter
3
Take the tests
Job preview, then skills test
4
Watch your inbox
And your junk folder
Technology Risk listings by intake
| Listing | Length, qualification and degree | Visa sponsorship |
|---|---|---|
| Great Britain, August 2027: Glasgow, London | Two years. “Role-specific qualification”. Any honours degree. | London: limited. Glasgow: none. |
| Great Britain, September 2027: Edinburgh, Glasgow, London | Two years. “Role-specific qualification”. Any honours degree. | London: limited. Edinburgh and Glasgow: none. |
| Northern Ireland, September 2027: Belfast, Derry/ |
Two years. “Future-focused skills and training”. Any honours degree. You must stay in Northern Ireland. | None |
| Data Assurance, London: closedopensee its listing | Two years. “Role-specific qualification”. An honours degree “in a technology related discipline”. | London only, limited |
From EY’s Technology Risk listings, checked on 15 October 2026. The seven graduate listings said “Applications are open”.17 October 2026. The seven graduate listings had closed by then.17 October 2026. Check each listing for its closing date. When we checked on 15 October 2026, Data Assurance said “Applications for this role are closed.”Data Assurance was open when we checked on 15 October 2026.Check the Data Assurance listing for its closing date.
Where to apply, the rules and EY’s help
- Where to apply. Each listing has its own form. August 2027: Glasgow, London. September 2027: Edinburgh, Glasgow, London, Belfast, Derry/Londonderry.
- One at a time. “You can only apply for one programme every six months, so choose carefully.” No swaps.
- If you are rejected. Wait six months and use a new email address. At most two applications a year.
- Changing office. Transfers “may be reviewed depending on vacancy availability”. A Northern Ireland offer “cannot be transferred to any other EY location in the UK or Ireland”.
- Stay active. If your application “has been inactive for 10 days”, EY withdraws it.
- Emails. Hotmail addresses “often reject or block our emails”. Real EY emails end in @ey.com or @uk.ey.com.
- Questions. Call EY on +44 (0)800 289 208, weekdays 8:30am to 5:30pm.
Your form answers: do and don’t
Do
“Maths (A), Computing (B), History (B), 2024”
EY asks for your qualifications and says “proofread before submitting”. Match your certificates exactly.
Don’t
“Applied to Technology Risk and Audit in the same week”
EY takes one programme every six months, with no swaps.
EY does not publish its form questions. Our CV achievement examples help you find a result for each Technology Risk skill. Getting ready to apply for jobs in the UK? Check your CV for free: see it the way a recruiter does, then fix each problem.
Save EY and over 2,000 other UK schemes to one free calendar. See what closes next and what you have applied to.
Track my schemes freeFree account, no card.
Office full or missed it? Your options
- The rule first. Each route below uses your one EY application for six months.
- Another office or intake. Glasgow and London run both August and September intakes.
- Placement year ahead? The one-year Technology Risk Industrial Placement in Belfast starts in July 2027.The one-year Technology Risk Industrial Placement in Belfast started in July 2027. It was open on 15 October 2026.It had closed when we checked on 15 October 2026.Check its listing for the closing date. EY calls it “a pathway to our Graduate programme within the same business area and location”.
- Internships. Both Technology Risk summer internships were closed when we checked on 15 October 2026. EY said its intern programmes “will open shortly”.Both Technology Risk summer internships had closed when we checked on 15 October 2026.EY’s intern programmes were open when we checked on 15 October 2026. Look for the Technology Risk internships.Check EY’s student pages for when its intern programmes open.
- Other EY programmes. Audit, Consulting, Tax and EY-Parthenon run their own graduate listings. Check which are still open (EY’s vacancies).
- Next cycle. EY gives no date for the next cycle.
- Other firms. See our PwC Audit graduate scheme guide.
05/10Stage 2 · Online tests
EY’s online tests
EY’s tests run on Cappfinity’s platform. EY’s careers pages do not name it. But EY’s prep hub says its systems are “operated on behalf of EY by Cappfinity Limited”.
First: Realistic Job Preview
“A first stage of online assessment including teamwork and learning capability.”
Then: behavioural skills test
“Measuring whether you have the required skills for the role.”
No technical test is published. EY names no coding test for Technology Risk.
Step through the tests
Behavioural questions: rank, scale, pick and write
Read the welcome page
A welcome page explains the assessment and gives a few tips. Press Continue to start. Employers set their own version, so yours may differ.
Rank the responses
A short work scenario comes with four possible actions. Drag them into order, from the one you would most likely take to the least likely.
Move the slider
Some questions ask where you sit between two views. Drag the handle along the scale, and a box above it shows what you picked.
Pick the best response
A scenario comes with four responses. Pick the one you think is most appropriate, then save and go on.
Write your answer
Some questions ask for a written answer. These can be timed, and a counter shows how many characters you have left.
Your moves
- Answer as you would really act. EY checks if your values “align with ours”.
- For written answers, plan two or three points first.
Video answers: check, read and record
Test your camera
Before the questions you record a short test clip, play it back and accept it. Employers set their own version, so yours may differ.
Read the question
The question appears with a short preparation countdown. Use the time to plan, then press Record Now.
Record your answer
A second timer shows how long you have to answer. Press Finish Recording when you are done.
Your moves
- Check your webcam and mic in a quiet, well-lit room.
- Use the prep time to plan two or three points.
Last year EY listed a 20-minute numerical test. EY has not confirmed one for 2026-27.
Our own simplified drawings of Cappfinity’s practice screens, not screenshots. Employers set their own version, so your screens may differ. We do not draw the pattern or rules format.
The rules: do and don’t
Do
- Work alone and answer as yourself
- Use a PC or laptop, not a phone
- Keep your camera on if asked
Don’t
- Use help from anyone or any AI tool
- Share any test content
- Use anyone else’s materials
EY’s rules say do every test “without any assistance”. EY names no AI rule, so use none.
Time limits, practice, adjustments and re-sits
- Time. Your invite and each test’s instructions give any time limits.
- Practice. EY’s practice hub sits “within the assessment portal”.
- Adjustments. Ask before you start: usually up to 25% extra time. EY “won’t be able to let you re-sit” if you ask afterwards.
- Re-sits. EY may ask you to re-sit. If it suspects help, it can reject you.
Go further: the best outside help
Our own picks, checked on 15 October 2026. We are not linked to any of these sites and earn nothing from them.
From EY
- What EY’s online tests could involveEY Careers FAQs · 2026-27 · no account neededEY’s six question formats, time limits and fair-play rules.Free
- EY’s application bootcamp webinarEY Careers · Tuesdays to 24 Nov, 4:00pm · virtual · free sign-upRan on Tuesdays to 24 Nov · virtualEY recruiters share tips, then take questions live.EY recruiters shared tips and took questions. Watch the page for new dates.Free
Practise
- Try Cappfinity’s numerical demoCappfinity, EY’s test provider · EY listed a numerical test last year · no account neededGeneral practice in last year’s format. EY sets its own version.Free
Skip anyone selling real EY questions or offering help during the tests. EY’s rules say you work alone and share nothing.
Next: learn how ranking and judgement questions work with our guide to psychometric and logic tests.
06/10Stage 3 · Experience Day
The EY Experience Day
The Experience Day is in person, in an EY office. EY uses it to “see how you work with other people and apply your skills in work-based scenarios”.
Group exerciseEY’s 2025 pack
Argue for one area · Hear every view · Agree as a team
Written exerciseEY’s 2025 pack
Client data · Short questions · Your written view
No case study or technical interview is published. Prepare for group and individual tasks instead.
When: EY’s graduate page says Experience Days run from November 2026 to April 2027. Book travel only after EY’s guidelines arrive.This cycle’s Experience Days ran from November 2026 to April 2027, says EY’s graduate page. EY repays travel “up to a set maximum amount”.
How to answer
Group exercise
EY’s 2025 pack asks you to “champion the successes of your industry and initiatives, whilst also ensuring that all parties’ views are included and considered”.
1
Read your brief
Note two facts for your area
2
Make your case
Short, with one number
3
Bring others in
Ask the quietest person
4
Help decide
Sum up and agree
Written exercise
EY’s 2025 pack asks you to “dig into this data, answer some questions about it, and then put together some written thoughts”. It adds: “We’re not just looking for number-crunching; we want your insights”.
1
Read the email
Know what the manager wants
2
Find key figures
Two or three, not all
3
Answer each question
Short and exact
4
Give your view
The answer first, then risks
Last year’s tip from EY: no mobile phone, and have a calculator, notepad and pen.
Skills interview
EY’s skills-led interviews are “either virtual or in-person depending on which stage in the process you are at”. Build each true story in four parts:
The moment
Where and when, in one line.
Your aim
What you set out to do, and why it was hard.
What you did
Your own steps, not the team’s.
What changed
The result, with a number if you can.
Follow-ups to rehearse
Why Technology Risk?Why EY?What exactly was your role?What would you do differently?
See our guide on how to pass a job interview, then rehearse the toughest interview questions.
Practise: one question at a time
Technology Risk’s skills
Our own practice prompts, built on Technology Risk’s six core skills. Not from a real EY interview.
Analytical thinking
Tell me about a time you checked whether information could be trusted.
What they’re testing: whether you “generate reliable insights”.
Show a strong answer
- What you checked, how you tested it and what you found.
Critical thinking
Tell me about a time you weighed evidence before you made a recommendation.
What they’re testing: using evidence “to form sound conclusions and recommendations”.
Show a strong answer
- The options, the evidence for each, your choice and why.
Inclusive collaboration
Tell me about a time you worked with people who saw things differently.
What they’re testing: working with “diverse teams and stakeholders”.
Show a strong answer
- Who differed and how, how you drew each view in, and what you agreed.
Problem solving
Tell me about a time you spotted a weak point in how something worked and helped fix it.
What they’re testing: whether you can “identify technology risks and support the development of practical, effective solutions”.
Show a strong answer
- The weak point, how you found it, the fix you suggested and what changed.
Why EY and EY’s skills
Our own practice prompts, built on EY’s own words and one coach topic. Not from a real EY interview.
Opener
Tell me about yourself.
Coaches say this opener is common in Big 4 interviews.
What they’re testing: a short, clear story that ends at Technology Risk.
Show a strong answer
- Coaches say: present, past, future. What you do now, what led you here, and why Technology Risk at EY next.
Why EY
Why Technology Risk, and why EY?
What they’re testing: real interest in the work.
Show a strong answer
- Two reasons tied to EY’s words, such as “strengthening trust in today’s digital world”, each linked to something you have done.
Embrace technology
Tell me about a new technology you looked into. What were its risks?
What they’re testing: “curiosity to learn about the benefits and risks”.
Show a strong answer
- The technology, one benefit, one risk and how you would check it.
Do the right thing
Tell me about a time you did the right thing when it was not easy.
What they’re testing: “Working ethically is important to you.”
Show a strong answer
- The pressure you faced, the choice you made, who you told and what happened next.
Your story bank: a worksheet to print or copy
Two stories per row. One story can cover two rows.
| What EY Technology Risk asks for | Story 1 | Story 2 |
|---|---|---|
| Analytical thinking | ||
| Problem solving | ||
| Inclusive collaboration | ||
| Critical thinking and judgement | ||
| Adaptability | ||
| Digital fluency | ||
| Why Technology Risk at EY |
Go further: the best outside help
Our own picks, checked on 15 October 2026. We are not linked to any of these sites and earn nothing from them.
From EY
- The eight skills EY looks forEY Careers · no account neededPlan one story per skill, then match them to Technology Risk’s six.Free
- EY’s own written exercise briefEY’s own, from the 2025 cycle · PDF · no account neededClient data, questions, then your written view. EY runs one Experience Day for all graduates.Free
- EY’s own group exercise briefEY’s own, from the 2025 cycle · large PDF · no account neededGive each friend one industry from the brief, then argue it out.Free
Watch
- 13 common Big 4 interview questions, from an audit managerJag Dhaliwal ACA on YouTube · Oct 2025 · 30 minCoaches say: prepare why this firm and this line of work, for any final interview.Free
Background reading
- The IT controls auditors test, explainedISACA Journal · Dec 2022 · no account neededExplains the IT controls behind EY’s IT audits. Not about EY’s hiring.Free
07/10Stage 4 · Final step
Final step and offers
EY holds a final interview only “if your programme includes” one. EY does not say whether Technology Risk does, so check your Experience Day invitation.
A final interview, if any
It “will usually take place two to three weeks after your EY Experience Day”.
An offer or the reserve list
When roles fill, EY puts some high performers on a reserve list, and offers a place if one frees up.
Another office
EY may contact you about “alternative office locations or vacancies”. A Northern Ireland offer cannot move.
Feedback and hearing back
- Feedback. “At each stage in our process, we are committed to giving you feedback.”
- Hearing back. EY publishes no timeframe. Watch your portal, inbox and junk folder.
When things happen: Technology Risk, 2026-27
15 October 2026
Seven listings open, each closes when filled
By 17 October 2026
All seven listings closed
17 October 2026
Our last check. See each listing for its closing date
Tuesdays to 24 Nov
EY’s application bootcamp webinars, 4:00pm
Until 24 Nov
EY’s application bootcamp webinars ran on Tuesdays
Nov 2026 to Apr 2027
EY Experience Days, in person
Nov 2026 to Apr 2027
EY Experience Days, in person
August 2027
The August intake starts in Glasgow and London
August 2027
The August intake started in Glasgow and London
September 2027
The September intake starts in all five offices
September 2027
The September intake started in all five offices
08/10
Visa sponsorship
Our reading: only London sponsors visas, on a limited basis. Graduate visa time counts towards GOV.UK’s four-year cap on the new entrant rate EY needs. If you have held a Graduate visa, ask EY before you apply.
EY’s London listings, checked 15 October 2026, say “Visa sponsorship is available for this position on a limited basis.” You “must be eligible for the New Entrant rate for four years from the start date of your programme”. For Edinburgh, Glasgow and Northern Ireland, EY “cannot accept applications for this role from those who would require EY visa sponsorship. This includes individuals who have or plan to apply for a Graduate visa” (EY listings).
The Graduate visa, right to work and EY’s cut-off
- Graduate visa. It lasts “2 years if you apply on or before 31 December 2026” and “18 months if you apply on or after 1 January 2027” (GOV.UK).
- Right to work. It must be “in place in time for the first day of the graduate programme”.
- Work-permit cut-off, London only. EY’s FAQs give 1 May 2027 as the cut-off for applicants who need a work permit, for the September 2027 intake.EY’s FAQs gave 1 May 2027 as the cut-off for applicants who need a work permit, for the September 2027 intake. EY labels it a 2026 intake, so check with EY. EY has not published an August cut-off. Check with EY.EY lists work-permit applications for the August intake as closed.EY now gives an August cut-off. Check its FAQs.
Need sponsorship? See our guides to UK companies that sponsor visas and staying in the UK after studying. This is general information, so check GOV.UK.
09/10
Key takeaways
Before your next step
- Apply now. Every listing closes when its places fill.This year’s listings have closed. Next year, apply early: every listing closes when its places fill.Check your listing for its closing date, and apply early.
- You get one EY application every six months, so pick Technology Risk, your intake and your office on purpose.
- If your office fills, try another Technology Risk office or intake first. Glasgow and London run both August and September.
- The tests are a job preview, then a behavioural skills test. No technical test is published.
- The Experience Day is in person. EY’s 2025 packs had a group and a written exercise.
- Need a visa? Only London sponsors, on a limited basis. You must qualify as a new entrant for four years.
When a scheme gives a close date, we email you a few days before it closes. Save EY once and the reminder is set.
Set my reminders freeFree account, no card.
10/10
Frequently asked questions
How does the EY Technology Risk graduate application process work?
You fill in EY’s online form for one office and intake, with no CV or cover letter. Then you take a Realistic Job Preview and a behavioural skills test. Next comes an in-person EY Experience Day. A final interview follows only if your programme includes one. EY does not say whether Technology Risk does.
When does the EY Technology Risk graduate programme close?
EY gives no fixed date. Each listing closes when its places fill, or if EY gets a high volume of applications. All seven listings were open on 15 October 2026.This year’s seven listings have closed. EY gave no fixed date. It closes each listing when its places fill, or if it gets a high volume of applications.Check each listing for its closing date. EY can also close a listing early when its places fill. Some roles may reopen later.
Do I need a technology degree for EY Technology Risk?
No. EY asks for an honours degree in any subject, GCSE grade 4/C in English Language and Maths, and three A-levels or five Highers, or equivalent. The separate Technology Risk Data Assurance Graduate Programme asks for a technology related degree, such as Computer Science or Maths. It was closed when we checked on 15 October 2026.It was open when we checked on 15 October 2026.Check its listing for the closing date.
Which qualification will I study for on EY’s Technology Risk programme?
EY does not name one. The Great Britain listings say “Role-specific qualification” and that you will “study towards a professional qualification relevant to your role”. The Northern Ireland listing says “Future-focused skills and training”.
Is there a technical test for EY Technology Risk?
EY publishes no technical test for Technology Risk. The online stages are a Realistic Job Preview and a behavioural skills test. EY also publishes no case study or technical interview.
Does EY sponsor visas for Technology Risk graduates?
Only in London, on a limited basis. You must qualify for the Skilled Worker new entrant rate for four years from your start date. Edinburgh, Glasgow and Northern Ireland do not sponsor. They cannot take people who need sponsorship, including Graduate visa holders.
