IT Risk Advisory – Manager

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee internal IT audits, IT SOX compliance, and technology risk advisory projects across various sectors.

• Supervise IT General Controls (ITGCs), SOX compliance, SOC reporting, IT risk evaluations, cybersecurity governance, and technology compliance projects.

• Analyze IT process documentation, which includes process narratives, flowcharts, risk and control matrices, testing documentation, and audit workpapers.

• Direct engagement planning, encompassing project scopes, risk assessments, testing strategies, project plans, and audit methodologies.

• Discover opportunities to enhance IT governance, internal controls, cybersecurity, and operational efficiency.

• Create actionable recommendations for clients.

• Prepare and present client-ready reports, executive presentations, and materials for Audit Committees.

• Oversee project workstreams, engagement economics, schedules, budgets, and deliverables for clients.

• Guide and mentor Consultants through technical support, coaching, and performance evaluations.

• Engage in proposal development, client relationship management, recruitment, and business development efforts.

• Collaborate with senior client stakeholders, acting as a trusted advisor.

⛳️ Requirements

• 5-9 years of experience in IT auditing, IT risk advisory, information security, systems implementation, public accounting, consulting, and/or corporate IT risk.

• Proven experience in leading IT internal audits, IT SOX compliance, IT General Controls (ITGCs), information security, SOC reporting, or technology risk projects.

• Familiarity with IT governance and control frameworks, including SOX ITGCs, COSO, SOC 1, and/or SOC 2.

• Experience in managing IT internal audits, SOX compliance, technology risk, cybersecurity governance, or compliance evaluations.

• Background in developing and reviewing IT process documentation, which includes process narratives, flowcharts, risk and control matrices, audit workpapers, and testing documentation.

• Expertise in performing or leading IT control design assessments, walkthroughs, testing procedures, remediation efforts, and enhancements to technology controls.

• Knowledge of cybersecurity and IT governance frameworks such as ISO 27001, NIST Cybersecurity Framework (CSF), COBIT, HIPAA, FAIR, PCI DSS, or similar regulatory and compliance standards.

• Experience in leading project teams, managing engagement economics, mentoring junior staff, and acting as a primary contact for client stakeholders.

• Background in contributing to proposal development, business development, or practice initiatives.

• Professional certifications such as CISA, CIA, CISSP, CPA, Security+, or other relevant credentials are a plus.

• A Bachelor’s degree in a relevant field is preferred.

• An MBA or other relevant graduate degree is advantageous.

• Experience with ERP implementations, cloud environments, identity and access management (IAM), governance, risk and compliance (GRC) technologies, or technology transformation projects is preferred.

• Exceptional interpersonal, written, and verbal communication skills.

• Ability to cultivate relationships across client and engagement teams.

• Capability to handle multiple workstreams and competing priorities.

• Strong analytical skills and structured problem-solving abilities.

• Entrepreneurial, self-driven, adaptable, ethical, and reliable.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance plans.

• Opportunities for continuous professional development and training.

• Flexible work arrangements and work-life balance support.

• Collaborative and inclusive company culture.