IT Audit, Cybersecurity & Risk Senior Consultant (SOC focus)

Baker Tilly•Frisco, TX

About The Position

Baker Tilly is seeking an IT Audit, Cybersecurity & Risk Senior Consultant focused on SOC reporting to join its Risk Advisory practice. The practice helps clients assess risks, develop strategies, and meet business objectives through expertise in risk, governance, internal audit, compliance, IT, and cybersecurity. The role provides opportunities to work with clients and teammates across a collaborative consulting practice, with flexibility in how and where work is performed and opportunities for career development. The Senior Consultant works with client executives and management teams to understand their businesses and identify and manage financial and operational risks in business systems. The role includes assessing and optimizing IT risk across cybersecurity, IT strategy and governance, regulatory and compliance requirements, and business continuity. The consultant reviews controls against industry frameworks, identifies design and execution gaps, supports audits and control assessments, communicates recommendations, and prepares engagement documentation and client reports. The position also involves building client relationships, presenting findings, expanding technical knowledge across technology environments, and supporting the professional growth of team members. The stated pay range is $82,000 to $132,900. Actual compensation depends on factors including skills, experience, qualifications, certifications, work arrangements, and geographic location. Baker Tilly offers a comprehensive compensation and benefits package to eligible employees.

Requirements

Four-year degree.
Three years of experience.
Excellent analytical, technical, and problem-solving skills, with strong attention to detail.
Exceptional verbal and written communication, collaboration, and time-management skills.

Nice To Haves

Bachelor’s degree in management/computer information systems, computer science, accounting information systems, computer engineering, industrial engineering, or a related program.
CISA, CISSP, CISM, CIA, or CPA certification.
Three or more years of experience with control testing, SOC reporting, and IT audit or cybersecurity.
Cloud audit experience and certifications.
Experience as a client-serving professional for a consulting firm.

Responsibilities

Work with client executives and management teams to understand their businesses and identify and manage financial and operational risks in business systems.
Develop knowledge of clients’ businesses and industries through direct client interaction and work across multiple aspects of engagements.
Analyze clients’ businesses, systems, and risks, and recommend business and process improvements based on their operations and objectives.
Assist clients with implementing processes and controls that address key risks.
Assess, manage, and optimize information technology risk across cybersecurity, IT strategy and governance, regulatory and compliance requirements, and business continuity.
Review client processes and controls against industry frameworks, identify gaps in design and execution, and communicate issues and recommendations.
Assist in developing audit programs and executing internal audits and IT control assessments covering IT strategy and governance, IT operations, business continuity and disaster recovery, cybersecurity, third-party risk, ITGC and application controls, SOC reporting, and regulatory and compliance requirements.
Draft executive summaries and final client reports, and document and review engagement work papers in accordance with industry-accepted internal audit methodologies.
Build client relationships and communicate effectively to provide superior client service.
Facilitate professional presentations to internal and external audiences.
Continue developing knowledge and experience with technology environments, platforms, applications, and tools or utilities.
Pursue ongoing learning and development through internal and external education, training, and cross-training.
Network and build relationships internally and externally with clients.
Support the growth and development of team members through Baker Tilly’s Care and Teach philosophy.