Technology Risk and Controls Senior Consultant

Crowe•Chicago, IL

18h•$77,600 - $153,800

About The Position

Joining our Consulting Technology Audit practice is an opportunity to be part of a dynamic and growing team with a passion for serving our clients and communities. From day one, you will help clients strengthen governance, embed risk considerations into decision-making, and develop insights that enable stronger business and technology environments. You will work in an entrepreneurial and innovative environment while delivering transformative consulting services and developing specialized skills that are in demand in today’s market. As a Technology Risk and Controls Senior Consultant, you will play a key role in the execution of IT General Controls (ITGC), IT Audit, IT SOX, and Technology Risk Consulting engagements. You will work directly with clients and engagement teams to assess technology risks, evaluate and test controls, identify opportunities for improvement, and communicate results.

Requirements

Bachelor's degree in Accounting, Information Systems, Computer Information Systems, Management Information Systems, or a related field.
3+ years of experience in IT audit, internal audit, IT SOX, technology risk consulting, or a related technology risk and controls role.
Experience evaluating and testing IT General Controls (ITGCs), including user access, change management, and IT operations controls.
Experience evaluating or testing IT Application Controls (ITACs), including automated controls embedded within business processes.
Experience testing the accuracy and completeness of system-generated reports or other key information used in business processes.
Understanding of System Development Life Cycle (SDLC), change management, and IT governance processes and related controls.
Ability to identify technology risks and control gaps and clearly document testing procedures, results, and conclusions.
Strong written and verbal communication skills, including the ability to explain technical and control-related matters to both technology and business stakeholders.
Strong analytical, problem-solving, organizational, and project execution skills.
Ability to work effectively both independently and as part of a collaborative engagement team.
Willingness and ability to travel based on client and engagement needs.

Nice To Haves

Professional certification or progress toward certification, such as CISA, CPA, CIA, or a similar credential.
Experience supporting or executing IT audit and technology risk engagements, including risk assessments, audit work programs, fieldwork, and client deliverables.
Knowledge of commonly used internal control and technology governance frameworks, including COSO and COBIT.
Familiarity with internal audit methodologies and the development of key audit deliverables.
Experience with SAP environments or implementations, including SAP ECC, S/4HANA, RISE with SAP, and SAP GRC.
Experience with continuous controls monitoring, controls automation, data analytics, or technology-enabled audit techniques.
Knowledge of common enterprise applications and platforms, including SAP, Oracle NetSuite, Microsoft Dynamics 365, Workday, and enterprise data warehouses.
Experience working with cloud and Software-as-a-Service (SaaS) environments.
Experience performing or supporting IT risk assessments.
Experience providing guidance, coaching, or day-to-day support to junior team members.

Responsibilities

Execute IT audit, IT SOX, and technology risk consulting engagements, including risk assessments, fieldwork, testing, documentation, and reporting.
Evaluate and test IT General Controls (ITGCs), IT Application Controls (ITACs), and other technology controls across a variety of systems and environments.
Perform testing of system-generated reports and other key information used in financial and operational processes.
Assess controls related to system development, change management, access management, IT operations, and technology governance.
Develop and monitor workplans, deadlines, and assigned budgets; proactively communicate status, risks, scope changes, and barriers to engagement leadership.
Prepare clear, accurate, and well-supported workpapers and engagement deliverables.
Identify control gaps, assess risks, and develop practical recommendations to strengthen clients' technology control environments.
Communicate testing results, observations, and recommendations to client and engagement team stakeholders.
Build strong client relationships through responsive communication, quality service delivery, and effective project execution.
Support project planning, status tracking, and coordination of engagement activities.
Provide guidance and coaching to junior team members and review work as appropriate.
Leverage technology-enabled tools and methodologies to improve the efficiency and effectiveness of audit and risk activities.
Lead assigned workstreams within IT audit, IT SOX, and technology risk consulting engagements, managing activities from planning through reporting.
Serve as a day-to-day client contact and build trusted relationships through responsive communication, sound judgment, and proactive problem-solving.
Participate in proposals, sales pursuits, thought leadership, training, and other practice-development activities, and identify potential opportunities to provide additional value to clients.