IT Risk Advisory - Consultant

CFGI; Greater London; On-site; GBP 50,000 - 80,000; Full time

Job summary

CFGI is seeking an experienced IT Audit professional to join its Risk Advisory team in the United Kingdom. You will perform IT controls testing, draft scope, and interact with clients and their auditors to deliver quality assessments.

The ideal candidate has 3–5 years in public accounting or industry IT audit, progressing toward CISA or CIA, with knowledge of SOX ITGC, COSO, SOC1/SOC2 and standards like ISO 27001 and NIST. You will work in a collaborative team across engagements.

Qualifications

• 3–5 years of experience in public accounting and/or industry performing IT audit, systems implementations, or Information Security.
• Pursuing official certification for CISA, CIA or other auditing certifications is valued.
• Strong communication skills, ability to work in teams.
• Solid knowledge of IT general controls, COSO, SOC 1 and SOC 2.

Responsibilities

• Performing IT controls testing, creating process narratives, flow charts or undertaking procedures for other types of assessments.
• Drafting engagement scope, project plans, risk assessments, testing approach and specific procedures.
• Analysing IT information and interviewing client contacts.
• Identifying areas for improvement and value‑add for clients.

Skills

IT audit

SOX ITGC

COSO framework

SOC 1/2

CISA/CIA progress

Interpersonal skills

Project management

InfoSec standards

Job description

CFGI consultants work as part of a team with other CFGI professionals, its clients and their external auditors (or other professional service firms) on a variety of facets of the engagements, such as IT Internal Audit, SOX implementation and testing, attestation/certification readiness work, business process improvement projects, compliance and other assessments.

Duties

• Performing IT controls testing, creating process narratives, flow charts or undertaking procedures for other types of assessments
• Drafting engagement scope, project plans, risk assessments, testing approach and specific procedures
• Analysing IT information
• Interviewing client contacts
• Identifying areas for improvement and value‑add
• Developing relationships with client contacts
• Assisting with managing engagement economics

Furthermore, all team members, from the Consultant level and up, build their skills by assisting the Firm's leadership with internal responsibilities for training, internal projects, and the continual improvement of the Risk Advisory team.

Ideal candidates

• Strong progress towards obtaining official certification for CISA, CIA or other standard auditing certification will be considered in lieu of university degree
• Three to Five years of experience in public accounting and/or industry performing IT audit, systems implementations, or Information Security
• Excellent interpersonal, written and oral communication skills, and ability to assimilate easily into teams
• Strong technical skills and a working knowledge of SOX IT General Controls, COSO, SOC 1, and SOC 2
• Awareness of ISO 27001, NIST standards, HIPAA, FAIR, and other relevant standards
• Effective analytical and critical thinking abilities
• Entrepreneurial nature, self‑motivated, ethical, and dependable
• Strong project management skills
• High energy with a commitment to quality client service
• Very strong performance within a team dynamic