IT Risk Advisory Senior

Schneider Downs has been providing accounting, tax, consulting, business advisory and wealth management services for over 65 years. Our growing IT Risk Advisory Services practice, a specialty area within our Consulting group, provides a wide array of service offerings, including Cybersecurity (NIST, CMMC, maturity assessments, etc.), Compliance Assessments (PCI, GDPR ISO, COBIT, HITRUST, HIPAA, etc.), Third Party Risk Management, IT Governance and Risk Assessments, SOX Advisory, and SOC1/SOC2 readiness assessments and reporting. As an IT Risk Advisory Senior, you will work as a member of the engagement team and work closely with CISO’s, CIO’s, CFO’s, CAE’s, and other stakeholders for small technology start-ups to global Fortune 500 public registrants to provide world class solutions and solve their complex IT risk management needs.

Responsibilities

Support the day-to-day activities of IT audit engagements for clients, including system development, readiness assessments, and/or platform reviews within multiple industries; Evaluate the design and effectiveness of technology controls throughout the business cycle; Proactively interact with client’s key management to gather information, resolve problems, and make recommendations for business and process improvements; Become a trusted advisor to our clients to help them be successful; Utilize data extraction, data analytics, and data visualization tools to bring insight to clients; Support the continued growth of the IT Risk Advisory practice by developing thought leadership, refining our content and methodologies, as well as researching and developing new and emerging solutions (AI, RPA, etc.); Lead diverse teams of cross-practice professionals that may include internal audit, cyber, external audit, fraud/forensics, and technology development/implementation; Supervise, train, and mentor staff and interns; Educate our shareholders, managers, and staff regarding IT Risk Advisory service offerings and capabilities

Requirements

Bachelor’s degree in Information Systems, Computer Science, or Management Information Systems; Minimum of two years of consulting experience performing internal audit, IT audit or risk advisory consulting services

Nice to have

Experience with Sarbanes Oxley 404 compliance assessments and remediation efforts; CISA, CISM, or CISSP is preferred, as well as CCSFP, CDPSE, CTPRA, CTPRP, or other similar certifications from organizations such as ISACA; Solid understanding of relevant regulations, industry best practices and frameworks (e.g., FFIEC, NIST, COSO, CIS, COBIT, ITIL, ISO 27001, PCI, HIPAA and GLBA) as well as the ability to apply these requirements to organizational internal control environments; Experience in IT, manufacturing, higher education, energy, insurance, financial services and/or retail/consumer products industries; Prior experience auditing various mainstream and custom ERP applications; Prior experience with a variety of database management systems including Oracle, SQL and other open-source technologies; Working knowledge of data analytics software such as IDEA or ACL

Benefits

Competitive compensation; Insurance, including health, dental, and vision, that begin on day one; 20+ days of paid time off and 13 paid holidays; Flex Fridays and office closures for summer and winter breaks; Parental leave, family care leave, and volunteer time; 401(k) plans and profit sharing; CPA exam bonus, education assistance program, and pet insurance