IT Risk Advisory Senior

Schneider Downs•Columbus, OH

1d•Hybrid

About The Position

As a trusted advisor in the professional services industry, you know what matters most to clients: Big thinking with a personal focus. You also know what matters most to your own success, including: career growth, work-life flexibility, leadership that cares about your ability to succeed, the opportunity to give and receive one-on-one coaching and mentoring, as well as learning opportunities that inspire professional development. Experience them all at Schneider Downs, where we’ve been providing accounting, tax, consulting, business advisory and wealth management services through our team of innovative thought leaders for over 65 years. Start building a career with people motivated to help you succeed—and enjoy more of what counts. Our growing IT Risk Advisory Services practice, a specialty area within our Consulting group, provides a wide array of service offerings, including Cybersecurity (NIST, CMMC, maturity assessments, etc.), Compliance Assessments (PCI, GDPR ISO, COBIT, HITRUST, HIPAA, etc.), Third Party Risk Management (program development and Implementation, detailed assessments, etc.), IT Governance and Risk Assessments, SOX Advisory, and SOC1/SOC2 readiness assessments and reporting. As an IT Risk Advisory Senior, you will work as a member of the engagement team and work closely with CISO’s, CIO’s, CFO’s, CAE’s, and other stakeholders for small technology start-ups to global Fortune 500 public registrants to provide world class solutions and solve their complex IT risk management needs. You will be part of a learning culture that values quality and integrity, where you’ll be supported by Schneider Downs professionals. We understand the importance of work-life balance. That's why we've embraced a hybrid work model, allowing you to enjoy the flexibility of working from home as well as in the office.

Requirements

Bachelor’s degree in Information Systems, Computer Science, or Management Information Systems
Minimum of two years of consulting experience performing internal audit, IT audit or risk advisory consulting services

Nice To Haves

Experience with Sarbanes Oxley 404 compliance assessments and remediation efforts
CISA, CISM, or CISSP is preferred, as well as CCSFP, CDPSE, CTPRA, CTPRP, or other similar certifications from organizations such as ISACA
Solid understanding of relevant regulations, industry best practices and frameworks (e.g., FFIEC, NIST, COSO, CIS, COBIT, ITIL, ISO 27001, PCI, HIPAA and GLBA) as well as the ability to apply these requirements to organizational internal control environments
Experience in IT, manufacturing, higher education, energy, insurance, financial services and/or retail/consumer products industries
Prior experience auditing various mainstream and custom ERP applications
Prior experience with a variety of database management systems including Oracle, SQL and other open-source technologies
Working knowledge of data analytics software such as IDEA or ACL

Responsibilities

Support the day-to-day activities of IT audit engagements for clients, including system development, readiness assessments, and/or platform reviews within multiple industries
Evaluate the design and effectiveness of technology controls throughout the business cycle
Proactively interact with client’s key management to gather information, resolve problems, and make recommendations for business and process improvements
Become a trusted advisor to our clients to help them be successful
Utilize data extraction, data analytics, and data visualization tools to bring insight to clients
Support the continued growth of the IT Risk Advisory practice by developing thought leadership, refining our content and methodologies, as well as researching and developing new and emerging solutions (AI, RPA, etc.)
Led diverse teams of cross-practice professionals that may include internal audit, cyber, external audit, fraud/forensics, and technology development/implementation
Supervise, train, and mentor staff and interns
Educate our shareholders, managers, and staff regarding IT Risk Advisory service offerings and capabilities