IT Risk Senior Associate (SOX & Internal Audit)

Grant Thornton•San Francisco, CA

15h•$101,200 - $129,030

About The Position

The IT Risk Senior Associate works within the Risk, Compliance & Controls Practice to help clients understand and address business risks. The role collaborates with teams to execute and report on risk management, internal control, and internal audit engagements, including work to develop, assess, or improve the design and operating effectiveness of IT risk management and internal control activities. The position participates in client engagements from start to completion, performing assigned project work across co-sourced and outsourced IT internal audit, IT internal control assessments, IT risk management program assessments, SOX and other compliance testing, and IT controls design and implementation. The associate learns each client’s industry, objectives, strategy, operations, processes, IT systems, and controls, and works with project teams and clients to deliver services in line with expectations. The role also involves collaboration across Advisory Business Lines and other Grant Thornton service lines, meeting performance metrics, and other assigned duties.

Requirements

Bachelor’s degree in Accounting, Finance, Information Technology, MIS, or a related field.
At least 2 years of related work experience with a professional services firm or as part of an internal audit function.
Understanding of IT risk management and cybersecurity risk management standards, such as COBIT and NIST CSF.
Experience assessing the design and operating effectiveness of IT risk management and IT controls, including IT general controls and application controls, for Internal Audit, SOX compliance, or other risk management activities.
Strong understanding of IT general controls and current focus areas of external financial statement auditors.
Experience assessing at least one operating system, database system, and IT infrastructure or network component.
Ability to execute multiple engagements and complete priorities in a rapidly growing team environment.
Strong client service, communication, analytical, organizational, and project management skills.
Strong computer skills, including proficiency in Microsoft Visio and Office Suite applications.
Ability to travel as needed.

Nice To Haves

CISA, CISSP, CISM, or CPA license/certification.
Experience assessing configuration and controls of ERP systems such as SAP, Oracle, PeopleSoft, or JD Edwards.
Experience assessing configuration and controls of SAP ECC, S/4 HANA, or similar systems, including BASIS and security administration or process controls.
Experience assessing GRC and Identity and Access Management (IAM) solutions.
Experience with analytics and visualization solutions such as ACL, IDEA, QlikView, QlikSense, Tableau, or Spotfire.

Responsibilities

Participate in client engagements from start to completion, executing and reporting on assigned project tasks.
Support co-sourced and outsourced IT internal audit engagements, IT internal control assessments, and IT risk management program assessments.
Test the design and operating effectiveness of IT controls for SOX and other compliance requirements.
Help clients design and implement IT controls.
Develop an understanding of clients’ industries, objectives, strategies, operations, processes, IT systems, and controls.
Execute IT control design and operating effectiveness test procedures based on engagement scope and client environment risk factors.
Apply an innovative and analytical mindset to help clients solve business issues and improve project execution efficiency.
Work with project teams and clients to deliver services in accordance with project leadership and client expectations.
Collaborate with colleagues across Advisory Business Lines and other Grant Thornton service lines, including Audit Services and Tax Services.
Meet or exceed defined performance metrics.
Perform other duties as assigned.