Director, IT Audit and Technology Risk Advisory

Overview

Risk & Regulatory – IT Audit and Technology Risk role requiring extensive professional services experience with SOX, IT risk management, and internal controls. Subject matter expertise on ERP applications and a strong foundation in IT controls, governance frameworks, and emerging technology risks.

• You will be responsible for helping to shape the strategic direction of the practice.
• Drive business development, both by expanding and growing existing accounts and pursuing new client opportunities for the firm.
• Work with emerging growth companies and established enterprises on projects including SOX readiness and compliance, internal audit, and enterprise risk management (ERM).
• Assist companies with implementing and assessing the effectiveness of SOX compliance programs, including:
  • risk assessments and system scoping
  • walkthroughs and documenting end-to-end technology processes, identifying risks and key controls
  • design and effectiveness of IT general controls (ITGC) and IT application controls (ITAC)
  • executing testing to validate operating effectiveness
  • evaluating deficiencies and remediation planning
  • management reporting and result documentation
• Execute internal audit and IT risk management activities to support client risk initiatives.
• Demonstrate subject matter expertise on technology risks and internal control solutions for ERP, SaaS, IT infrastructure and cloud platforms.
• Create and deliver presentations on technical concepts, project plans, milestones, and results to client stakeholders.
• Review team progress for compliance with work programs, professional standards, budgets, deliverables, and deadlines.
• Identify and implement creative business solutions to improve the firm’s services, methodologies and approaches.
• Leverage firm partnerships and tools to assess risks related to information security and change management.
• Apply data analytics to enhance internal audits and control assessments.
• Understand the breadth of Risk & Regulatory services and identify opportunities for clients.
• Direct and facilitate teams, collaborating with technology, accounting, finance and operations groups.
• Manage existing and prospective client relationships, aiming to identify and close new business opportunities.
• Lead project teams and serve as a primary liaison to clients; mentor and develop staff.
• Establish credibility as a trusted advisor.

• 10+ years of recent professional services experience (public accounting or advisory firm). 5+ years may be combined with applicable IT risk management and internal controls experience with a Fortune 500 organization.
• Bachelor’s degree in Business Administration, Accounting, Management Information Systems or a related field.
• One or more of the following risk related certifications: CPA, CIA, CISA, or CISSP.
• Demonstrated track record of technical expertise with SOX, IT risk management and internal audit.
• Subject Matter Expert on select ERP applications such as SAP, Net Suite, Oracle Cloud, People Soft, or Microsoft Dynamics.
• Detailed understanding of Sarbanes-Oxley (SOX) compliance and PCAOB requirements.
• Experience implementing and assessing controls over highly automated business processes.
• Knowledge of IT leading practices to provide clients effective and practical recommendations.
• Knowledge and application of IT controls and governance frameworks such as SOC 1/2, COBIT, NIST (CSF, 800-53, and 800-171), ITIL and ISO 27001/2.
• Knowledge of emerging technology risks, including cloud computing, agile development/CICD, cybersecurity, and privacy.
• Knowledge of best practices for authentication, authorization and change management.
• Strong foundational knowledge of infrastructure and platform components such as Windows, Linux, Unix, Active Directory, SQL, MySQL, Open Source, and Oracle.
• Strong track record of meeting business development targets and developing thought leadership materials.
• Proven ability to lead, motivate and build teams that deliver services and solutions that surpass client expectations.
• Ability to lead workshops, including gathering/documenting requirements and use-cases and recommending envisioned processes.
• History of developing risk and compliance…