Job at a glance
Job Title: IT Audit and Risk Advisory Specialist Job Description This role focuses on providing assurance over IT and business process controls, performing external audits, delivering third-party reporting, and advising clients on IT risk and control matters. You will support financial statement audits and standalone reviews by assessing the design and operating effectiveness of IT general controls and application controls across key systems such as ERP, core banking platforms, and cloud environments.
Responsibilities Plan and execute IT audit and IT risk advisory engagements in support of financial statement audits and standalone reviews. Provide assurance over IT and business process controls to support overall audit objectives. Perform external IT-related audits and deliver high-quality third-party reporting for clients. Assess the design and operating effectiveness of IT General Controls (ITGCs), including access management, change management, and computer operations.
Perform detailed testing across key systems such as ERP platforms, core banking systems, and cloud-based solutions. Evaluate automated and configurable application controls to determine adequacy and effectiveness. Support SOX and ICFR compliance programs, including testing, documentation, and remediation activities. Identify control gaps and weaknesses, assess their risk impact, and recommend practical, risk-based improvements.
Draft clear, concise audit findings and client deliverables, including reports, working papers, and presentations. Collaborate effectively with external auditors, internal audit teams, and client stakeholders to coordinate testing and share findings. Interface directly with clients to discuss audit scope, testing results, remediation plans, and ongoing risk management considerations. Perform document control testing and maintain accurate, organized audit documentation and evidence.
Apply risk management and internal control concepts to evaluate IT processes and systems. Coach and review work performed by junior team members to ensure quality and consistency. Contribute to proposal development and client relationship management activities as needed. Support quality control efforts by adhering to established audit methodologies, standards, and documentation requirements. Essential Skills Minimum 3 years of experience in IT auditing, including planning and executing IT audit engagements.
Minimum 3 years of experience in document control testing within an audit or compliance environment. Hands-on experience with IT General Controls (ITGC) testing, including access management, change management, and computer operations. Practical experience with SOC 1 and SOC 2 related audit work or reporting. Strong understanding of IT controls, internal control frameworks, and risk management principles.
Ability to perform control testing across key systems such as ERP platforms, core banking systems, and cloud environments. Experience supporting SOX compliance and internal control over financial reporting (ICFR) programs. Ability to interface directly with clients in a professional and confident manner. Strong skills in auditing, control testing, document control, and quality control. Capacity to draft clear, concise audit findings and deliverables for both technical and non-technical audiences.
Effective collaboration skills to work with external auditors, internal audit teams, and client stakeholders. Ability to coach and review work of junior team members, ensuring adherence to audit methodology and quality standards. Additional Skills & Qualifications IT Specialist Accreditation is required; training support is available to obtain this accreditation. Professional certification such as CISA is highly relevant and beneficial for this role.
Experience with SOC 1 and SOC 2 engagements and reporting is an advantage. Background in risk management and internal control assessment is valuable. Strong client interaction skills, including the ability to commun