Staff Consultant - Risk (IT)

SC&H Group External•Hunt Valley, MD

1d•Hybrid

About The Position

SC&H Group is searching for a talented, motivated professional to join our Risk Consulting Practice as a Staff Consultant focused on IT audit. You’ll apply your IT audit, internal control, and technology risk experience while building your business, technical, and project management skills in a challenging, rewarding environment. SC&H’s Risk Consulting Practice delivers internal audit, IT audit, Sarbanes-Oxley (SOX) 404 compliance, and process, risk, and control consulting. We help organizations independently assess their financial, operational, and technology risks. You’ll work alongside talented consultants to give clients practical recommendations that reduce risk, strengthen controls, improve operating effectiveness and efficiency, and support their business objectives.

Requirements

Bachelor’s degree in Accounting, Finance, Information Systems, Computer Science, or a related field
1–3 years of related experience in IT audit, internal audit, SOX compliance, internal controls, or technology risk consulting
Working knowledge of ITGCs, SOX 404, and common control frameworks (COSO, COBIT, NIST)
Familiarity with enterprise systems (e.g., ERP, cloud platforms, databases) and how to assess their controls
Exceptional integrity, values, principles, and work ethic
The ability to quickly understand and evaluate complex business and technology processes
Excellent verbal communication and business writing skills, including the ability to explain technical topics to non-technical audiences
Strong analytical, organizational, and project management skills
The ability to excel in a team environment and think independently

Nice To Haves

CISA, CPA, CIA, or CISSP (or progress toward one) highly preferred

Responsibilities

Perform IT internal audits and SOX 404 testing for clients, including IT general controls (ITGCs), application controls, and IT-dependent manual controls.
Assess technology and information security risks across systems, infrastructure, and processes, such as access management, change management, IT operations, cybersecurity, and third-party/vendor risk.
Support IT consulting engagements, including control design, risk assessments, and framework alignment (e.g., COSO, COBIT, NIST CSF, SOC reporting).
Review operational and financial processes to give clients an independent assessment of business risks, internal controls, and process effectiveness and efficiency.
Document processes, controls, and test results in clear, well-organized workpapers, and communicate findings and recommendations to clients and engagement leaders.
Build strong client relationships by understanding client needs and working productively with business, finance, and IT personnel.
Stay current on industry standards, emerging technology risks, regulatory developments, and business trends relevant to your clients.
Use technology and data analytics to improve audit and testing approaches, share what you learn with the team, and enhance service delivery.
Demonstrate teamwork, integrity, leadership, and initiative, and work with team members to set goals and responsibilities for each engagement.
Learn SC&H’s service lines, contribute ideas, and identify opportunities where our services can help clients.