IT Risk Senior Associate (SOX & Internal Audit)

Grant Thornton•San Francisco, CA

About The Position

As an IT Risk Senior Associate in Grant Thornton’s Risk, Compliance & Controls Practice, you will help clients understand and address business risks in proactive and responsive contexts. You will collaborate with teams to execute and report on risk management, internal control, and internal audit engagements that develop, assess, or improve the design and operating effectiveness of IT risk management and internal control activities. You will participate in client engagements from start to completion, executing and reporting on assigned project tasks. These may include co-sourced and outsourced IT internal audit, IT internal control assessments, IT risk management program assessments, testing IT control design and operating effectiveness for SOX and other compliance requirements, and helping clients design and implement IT controls. You will learn about clients’ industries, objectives, strategies, operations, processes, IT systems, and controls; perform testing based on engagement scope and client risk factors; and work with project teams and clients to deliver services in line with expectations. You will also collaborate across Advisory Business Lines and Grant Thornton service lines, meet or exceed performance metrics, and perform other duties as assigned. The base salary range is $101,200 to $129,030. Placement within the range is determined at Grant Thornton’s discretion based on factors including job-related knowledge and skills, experience, business needs, progression within the role, geographic location, and internal equity. Travel may be required as needed.

Requirements

Bachelor’s degree in Accounting, Finance, Information Technology, MIS, or a related field.
Minimum 2 years of related work experience with a professional services firm or in an internal audit function.
Understanding of IT risk management and cybersecurity risk management standards, such as COBIT and NIST CSF.
Experience assessing the design and operating effectiveness of IT risk management and IT controls, including IT general controls and application controls, for internal audit, SOX compliance, or other risk management activities.
Strong understanding of IT general controls and current focus areas of external financial statement auditors.
Experience with at least one operating system, preferably multiple, such as OS/400, Windows, or UNIX; database systems such as Oracle or SQL; and IT infrastructure or network components such as domain controllers, firewalls, routers, and intrusion prevention/detection solutions.
Experience with ACL, IDEA, QlikView, QlikSense, Tableau, Spotfire, or other analytics and visualization solutions.
Ability to execute multiple engagements and manage priorities in a rapidly growing team environment.
Exceptional client service, communication, analytical, organizational, and project management skills.
Strong computer skills, including proficiency in Microsoft Visio and Microsoft Office Suite applications.
Ability to travel as needed.

Nice To Haves

CISA, CISSP, CISM, or CPA license/certification.
Experience assessing the configuration and controls of ERP systems such as SAP, Oracle, PeopleSoft, or JD Edwards.
Experience assessing the configuration and controls of SAP ECC or S/4 HANA, including BASIS and security administration and process controls.
Experience assessing Governance, Risk, and Compliance (GRC) and Identity and Access Management (IAM) solutions.

Responsibilities

Participate in client engagements from start to completion, executing and reporting on assigned project tasks.
Perform co-sourced and outsourced IT internal audit work, IT internal control assessments, and IT risk management program assessments.
Test the design and operating effectiveness of IT controls for SOX and other compliance requirements.
Help clients design and implement IT controls.
Understand clients’ industries, objectives, strategies, operations, processes, IT systems, and controls.
Execute IT control testing procedures based on engagement scope and client-environment risk factors.
Apply an innovative and analytical mindset to help clients solve business issues and improve project execution efficiency.
Work with project teams and clients to deliver services in accordance with project leadership and client expectations.
Collaborate with colleagues across Advisory Business Lines and Grant Thornton service lines, including Audit Services and Tax Services.
Meet or exceed defined performance metrics.
Perform other duties as assigned.