Sr. Controls Consultant

CliftonLarsonAllen•Madison, WI

About The Position

CLA is a top 10 national professional services firm where our purpose is to create opportunities every day, for our clients, our people, and our communities through industry-focused wealth advisory, digital, audit, tax, consulting, and outsourcing services. Even with more than 8,500 people, 130 U.S. locations, and a global reach, we promise to know you and help you. CLA is seeking a highly motivated Senior Associate to join our IT Governance, Risk & Compliance (GRC) consulting team. The successful candidate will play a pivotal role in delivering high-quality IT risk management and compliance services to our clients. This position offers the opportunity to work with a diverse portfolio of organizations, collaborate with seasoned professionals, and contribute to the growth and development of our consulting practice.

Requirements

Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or related field.
Minimum of 3–5 years’ experience in IT risk management, security assessment, or IT audit within a consulting or professional services environment.
Strong understanding of IT governance, risk, and compliance frameworks (NIST, COBIT, CIS, SCF, FFIEC, HIPAA, etc.).
Working knowledge if IT governance domains including information security policy, IT risk management, vendor management, business continuity planning and disaster recovery, incident response, physical security, network security, endpoint security, user administration, change management, system development lifecycle, system maintenance, and application administration.
Excellent analytical, problem-solving, and communication skills.
Demonstrated ability to lead projects and mentor junior staff.
Proven track record of delivering high-quality client service and building strong client relationships.

Nice To Haves

Relevant certifications (e.g., CISA, CISSP, CISM, CRISC) strongly preferred.

Responsibilities

Execute comprehensive information technology and security risk assessments for clients, identifying vulnerabilities, threats, and areas for improvement.
Conduct reviews of IT general controls, application controls, and related governance processes to ensure compliance with industry standards and regulatory requirements.
Perform assessments based on leading IT governance and security frameworks (e.g., NIST, COBIT, CIS, SCF), and provide actionable recommendations for improvement.
Mentor and train new associates by sharing expertise, providing guidance on client engagements, and fostering a collaborative learning environment.
Lead the development of new consulting service offerings in response to emerging risks, client needs, and regulatory changes, working closely with team leadership.
Support managers and directors in managing client relationships, including participating in meetings, preparing deliverables, and ensuring client satisfaction.