IT Audit Consultant - ITGC - Financial Services

RGP•Pittsburgh, PA

11d•Remote

About The Position

RGP is seeking an experienced IT Audit Consultant to support a large banking and financial services client on a 6+ month engagement. The consultant will focus primarily on IT General Controls (ITGCs) across the organization’s technology environment, assessing control design and operating effectiveness, identifying control gaps, documenting findings, and supporting remediation and validation efforts. The role involves conducting control walkthroughs and testing, reviewing evidence, documenting audit results, and assessing technology controls supporting financially significant applications and business processes. The consultant will collaborate with IT, business, risk, audit, information security, compliance, and finance stakeholders, and communicate findings to management in a highly regulated financial services environment. Work will be performed fully remotely. RGP describes its environment as focused on meaningful work, ongoing professional development, and collaboration. Compensation is commensurate with qualifications, experience, geographic location, market, and operational factors.

Requirements

At least 5 years of IT Audit, IT Risk, Technology Controls, or similar experience, with significant hands-on ITGC experience.
Previous experience in the banking or financial services industry.
Strong understanding of ITGC domains, particularly access management, change management, SDLC, and IT operations.
Experience conducting control walkthroughs and testing, reviewing evidence, identifying deficiencies, and preparing audit documentation.
Knowledge of SOX ITGC environments and risk-based audit methodologies.
Ability to evaluate complex technology processes and translate technical risks into clear business and control implications.
Strong written and verbal communication skills and ability to interact effectively with technology teams, control owners, auditors, and senior stakeholders.
Ability to work independently in a fast-paced, highly regulated environment.

Nice To Haves

Experience auditing large, complex banking technology environments.
Familiarity with regulatory expectations applicable to large financial institutions.
Experience with cybersecurity controls, information security, cloud environments, third-party technology risk, automated controls, and application controls.
Familiarity with COBIT, NIST, ISO 27001, COSO, and SOX.
Experience using audit/GRC platforms such as Archer, ServiceNow GRC, or AuditBoard.
CISA, CIA, CISSP, CRISC, or CPA certification; certifications are preferred but not required.

Responsibilities

Perform IT audits and ITGC testing across applications, infrastructure, databases, and supporting technology environments.
Evaluate the design and operating effectiveness of user access and identity/access management, privileged access, user provisioning and de-provisioning, segregation of duties, change management, SDLC, computer operations, backup, recovery, and business continuity controls.
Conduct control walkthroughs, develop testing procedures, review supporting evidence, and document testing results.
Identify control deficiencies, technology risks, and process gaps, and communicate findings clearly to stakeholders.
Assist with audit workpapers, risk assessments, testing documentation, and audit reports.
Work with control owners and technology teams to understand root causes and support remediation and validation activities.
Assess IT controls supporting financially significant applications and business processes.
Partner with Internal Audit, Technology Risk, Information Security, Compliance, Finance, and business teams throughout engagements.
Support audits and assessments involving regulatory requirements and industry control frameworks.
Manage assigned audit activities and deliverables against established project timelines.