We are seeking an experienced IT Audit Consultant to support a large financial services organization with technology risk, controls, and audit initiatives. The consultant will leverage strong IT General Controls (ITGC) experience to assess the design and operating effectiveness of technology controls, identify control gaps, document findings, and support remediation efforts.
The ideal candidate will bring prior experience working within a banking or financial services environment, with a solid understanding of technology risks, regulatory expectations, internal controls, and audit methodologies. This individual should be comfortable working independently, partnering with technology and business stakeholders, and communicating audit findings to management.
Key Responsibilities- Perform IT audit and ITGC testing across applications, infrastructure, databases, and supporting technology environments.
- Evaluate the design and operating effectiveness of IT controls, including:
- User access and identity/access management
- Privileged access
- User provisioning and de-provisioning
- Segregation of duties
- Change management
- System development lifecycle (SDLC)
- Computer operations
- Backup, recovery, and business continuity-related controls
- Execute control walkthroughs, develop testing procedures, review supporting evidence, and document testing results.
- Identify control deficiencies, technology risks, and process gaps and clearly communicate findings to stakeholders.
- Assist with development of audit workpapers, risk assessments, testing documentation, and audit reports.
- Work with control owners and technology teams to understand root causes and support remediation and validation activities.
- Assess IT controls supporting financially significant applications and business processes.
- Partner with Internal Audit, Technology Risk, Information Security, Compliance, Finance, and business teams throughout the engagement.
- Support audits and assessments involving regulatory requirements and industry control frameworks.
- Manage assigned audit activities and deliverables against established project timelines.
What You Will Work On
You will support a large banking client on a 6+ month IT Audit engagement, focusing primarily on IT General Controls (ITGCs) across the organization's technology environment. You will perform control walkthroughs and testing, evaluate the design and operating effectiveness of controls, review supporting evidence, document audit results, and identify potential control gaps. Key areas may include user and privileged access, change management, SDLC, computer operations, and other technology controls supporting critical banking systems. You will collaborate with IT, business, risk, and audit stakeholders to communicate findings, support remediation efforts, and help ensure technology controls align with the expectations of a highly regulated financial services environment.
What You Will Bring
Required Qualifications- 5+ years of IT Audit, IT Risk, Technology Controls, or similar experience, with significant hands-on ITGC experience.
- Previous experience within the banking or financial services industry.
- Strong understanding of ITGC domains, particularly access management, change management, SDLC, and IT operations.
- Experience performing control walkthroughs, control testing, evidence review, deficiency identification, and audit documentation.
- Knowledge of SOX ITGC environments and risk-based audit methodologies.
- Ability to evaluate complex technology processes and translate technical risks into clear business and control implications.
- Strong written and verbal communication skills with the ability to interact effectively with technology teams, control owners, auditors, and senior stakeholders.
- Ability to work independently in a fast-paced, highly regulated environment.
Preferred Qualifications- Experience auditing large, complex banking technology environments.
- Familiarity with regulatory expectations applicable to large financial institutions.
- Experience with cybersecurity controls, information security, cloud environments, third-party technology risk, automated controls, and application controls.
- Familiarity with frameworks and standards such as COBIT, NIST, ISO 27001, COSO, and SOX.
- Experience using audit/GRC platforms such as Archer, ServiceNow GRC, or AuditBoard.
- Professional certifications such as CISA, CIA, CISSP, CRISC, or CPA are preferred but not required.
What You Can Expect
- An inspirational place for you to do your best work, be engaged in meaningful ways, and continually develop the skills, competencies and qualities that set our team apart.
- Compensation commensurate with your qualifications, experience, and other factors including geographic location, market and operational factors.
- Total Rewards include: Medical, Dental, Vision, Life Insurance, Disability Insurance, 401(k) Savings Plan, Employee Stock Purchase Plan, Professional Development Program, Paid Time Off and Paid Sick Time (in geographies where legally required).
