IT Audit, Cybersecurity & Risk Manager (SOC Focus)

Baker Tilly•Frisco, TX

About The Position

Baker Tilly’s Risk Advisory practice helps clients assess risks, develop strategies, and achieve business goals through expertise in risk, governance, internal audit, compliance, IT, and cybersecurity. The IT Audit, Cybersecurity & Risk Manager works with client executives and management teams to identify and manage financial and operational risks in business systems and ensure technology risks are managed. The role involves direct client interaction, advising clients on business and process improvements, and assessing information technology risk across cybersecurity, IT strategy and governance, regulatory compliance, and business continuity. The manager oversees the development of audit programs and execution of internal audits and IT control assessments, including IT governance and operations, business continuity and disaster recovery, cybersecurity, third-party risk, IT general controls and application controls, SOC reporting, and regulatory and compliance requirements. The role also includes preparing reports and work papers, maintaining client relationships, managing engagement staffing and financial targets, developing team members, and continuing professional development. The position offers career development, flexibility in how and where work is performed, and a collaborative team environment. Work location requirements should be discussed with a Baker Tilly talent acquisition professional.

Requirements

Four-year degree.
Five years of experience.
Tier 1 or Tier 2 certification.
Strong analytical, technical, and problem-solving skills, with attention to detail.
Excellent verbal and written communication, collaboration, and time-management skills.

Nice To Haves

Bachelor’s degree in management/computer information systems, computer science, accounting information systems, computer engineering, industrial engineering, or a related program.
CISA, CISSP, CISM, CIA, or CPA certification(s).
Five or more years of experience in IT audit or cybersecurity.
Previous experience performing SOC and SOX audits.
Experience as a client-serving professional for a consulting firm.

Responsibilities

Work with client executives and management teams to understand their businesses and identify and manage financial and operational risks in business systems.
Develop in-depth knowledge of clients’ businesses and industries through direct client interaction and work across engagement activities.
Provide recommendations for business and process improvements based on clients’ operations, processes, and objectives.
Advise clients and assist with implementing processes and controls that address key risks.
Assess, manage, and optimize IT risk across cybersecurity, IT strategy and governance, regulatory and compliance requirements, and business continuity.
Review client processes and controls against industry frameworks, identify design and execution gaps, and communicate issues and recommendations.
Manage the development of audit programs and execution of internal audits and IT control assessments covering IT strategy and governance; IT operations, business continuity, and disaster recovery; cybersecurity; third-party risk; IT general controls and application controls; SOC reporting; and regulatory and compliance requirements.
Draft executive summaries and final client reports, and document and review engagement work papers in accordance with accepted internal audit methodologies.
Build client relationships and communicate effectively to provide superior service.
Facilitate professional presentations for internal and external audiences.
Continue developing knowledge and experience with technology environments, platforms, applications, and tools or utilities.
Help manage client engagement staffing, billings and collections, and client profitability targets.
Network and build relationships internally, with clients, and in the community.
Participate in professional development and firm-wide learning and development programs.
Support team members’ growth and professional goals through the Baker Tilly Care and Teach philosophy.
Participate in social activities and team outings that encourage work-life balance.