IT Audit, Cybersecurity & Risk Advisory Senior Consultant (PCI Focus)

Baker Tilly•Lehi, UT

3d•$78,100 - $164,500

About The Position

Baker Tilly is hiring a Senior Consultant for its Risk Advisory practice, with a focus on PCI. The role supports clients in assessing risks, developing strategies, and meeting business goals through expertise in risk, governance, internal audit, compliance, IT, and cybersecurity. The consultant works with client executives and management teams to understand their businesses and identify and manage security and PCI DSS compliance risks. The position primarily involves PCI DSS compliance assessments, while also participating in cybersecurity, technology risk, and other advisory engagements as client and business needs arise. The role offers opportunities for professional growth, collaboration, flexibility in how and where work is performed, and the development of client and team relationships.

Requirements

Four-year degree.
At least 3 years of experience.
Strong analytical, technical, and problem-solving skills, with attention to detail.
Excellent verbal and written communication, collaboration, and time-management skills.

Nice To Haves

Bachelor’s degree in management information systems, computer information systems, computer science, accounting information systems, computer engineering, industrial engineering, or a related program.
3 or more years of experience in IT audit or cybersecurity.
CISA, CISSP, CISM, or CPA certification.
Experience as a PCI Qualified Security Assessor (QSA).
Experience serving clients at a consulting firm.
Cloud audit experience and certifications.

Responsibilities

Work with client executives and management teams to understand their businesses and identify and manage security and PCI DSS compliance risks.
Perform PCI DSS compliance assessments, evaluate client environments against applicable requirements, and document results in Reports on Compliance (ROCs) and/or Self-Assessment Questionnaires (SAQs), with associated Attestations of Compliance (AOCs).
Participate in cybersecurity, technology risk, and other advisory and consulting engagements as client and business needs arise.
Provide recommendations for business and process improvements based on clients’ operations, processes, and objectives.
Assist clients with implementing processes and controls that address key risks.
Assess, manage, and optimize IT risk across cybersecurity, IT strategy and governance, regulatory and compliance requirements, and business continuity.
Review client processes and controls against industry frameworks, identify design and execution gaps, and communicate issues and recommendations.
Assist with developing audit programs and executing internal audits and IT control assessments across IT strategy and governance, IT operations, business continuity and disaster recovery, cybersecurity, third-party risk, IT general controls and application controls, SOC reporting, PCI DSS compliance, and regulatory and compliance requirements.
Draft executive summaries and final reports, and document and review engagement work papers in accordance with accepted internal audit methodologies.
Build client relationships, communicate effectively, and provide superior client service as a business advisor.
Deliver professional presentations to internal and external audiences.
Develop knowledge and experience with varied technology environments, platforms, applications, and tools or utilities.
Pursue ongoing learning and development through internal and external education, training, and cross-training.
Network and build relationships internally and externally with clients.
Support team members’ growth and development in accordance with Baker Tilly’s Care and Teach philosophy.