Senior Consultant – Technology Risk & Internal Controls

Crowe Capability Center - India; Dadri; On-site; INR 1,080,000 - 1,320,000; Full time

Job summary

Crowe Capability Center – India seeks a technically capable Consultant in Technology Risk and Controls to support IT audit engagements. You will perform testing of access, change, and operational controls, document results, and communicate findings with stakeholders.

Ideal candidates hold relevant accounting/IT degrees and 2–4 years of IT risk experience, with familiarity in IT governance frameworks and regulatory standards. The role fosters growth toward internal audit leadership within Crowe.

Qualifications

• Chartered Accountant/MBA/CMA or IT-related degree with internal audit exposure.
• 2–4 years of IT internal audit, risk management, or consulting experience.
• Knowledge of IT controls, ITSOX, SDLC, and IT governance frameworks.

Responsibilities

• Independently execute testing over access management, change management, IT operations, and interfaces per firm standards.
• Identify IT risks, control gaps, and improvement opportunities across enterprise systems and cloud environments.
• Prepare documentation and workpapers per firm and regulatory standards.

Skills

IT Internal Audit

Risk Management

IT Controls

SOX

NIST

ISO 27001

Cybersecurity basics

Education

Chartered Accountant

MBA

CMA

Bachelors in IT/CS

Tools

Excel

Word

PowerPoint

Workiva

Audit Board

Archer

Teammate

ServiceNow

Job description

Your Journey at Crowe Starts Here:At Crowe, you can build a meaningful and rewarding career. With real flexibility to balance work with life moments, you’re trusted to deliver results and make an impact. We embrace you for who you are, care for your well-being, and nurture your career. Everyone has equitable access to opportunities for career growth and leadership. Over our 80-year history, delivering excellent service through innovation has been a core part of our DNA across our audit, tax, and consulting groups. That’s why we continuously invest in innovative ideas, such as AI-enabled insights and technology-powered solutions, to enhance our services. Join us at Crowe and embark on a career where you can help shape the future of our industry.Job Description:What It Means to Be a Consultant at CroweConsulting is a dynamic business focused on solving problems for our clients and serving our core markets through innovative solutions. As technology and AI continue to reshape the consulting landscape, we are looking for individuals who are curious, adaptable, and eager to learn. At Crowe, consultants are expected to build both technical and transferable skills, think critically, and use technology to solve real business problems. In this role, you will continuously learn, collaborate across teams, and explore how tools, including emerging AI capabilities, can improve efficiency, insights, and client outcomes.As you grow, you’ll also begin to take ownership of client relationships, contribute to account strategy, and support the delivery of high-impact work. Developing a sense of account leadership, including understanding client needs, ensuring delivery excellence, and building trusted partnerships, is part of what sets successful consultants apart.Success in this role comes from a growth mindset, strong communication skills, advanced critical thinking, and the ability to navigate new challenges with confidence.The Technology Risk and Controls Senior Staff professional is experienced contributor who supports client projects by performing IT control testing, documentation, and compliance review activities. This position is a key execution resource to internal audit and advisory engagements by supporting risk assessment, IT process and control walkthrough and testing via evidence evaluation.You’ll develop a deeper understanding of how technology supports business objectives and learn to identify and mitigate risks that impact security, compliance, and performance. You’ll gain exposure to diverse clients, industries, and technologies while building a strong foundation for advancement into internal audit leadership or risk consulting roles.Responsibilities:Independently execute detailed testing procedures over access management, change management, IT operations, and system interfaces in accordance with firm methodologies and regulatory standards (e.g., SOX, SOC, NIST, ISO 27001).Able to identify and document key IT risks, control gaps, and improvement opportunities across enterprise systems, cloud environments, and digital platforms.Proactively analyze and clearly articulate the design and effectiveness of automated controls, system configurations, and data flows that support financial, operational, and compliance objectives.Prepare clear, well-supported documentation and workpapers in accordance with firm and regulatory standards.Work closely with business, risk, and technology stakeholders, including management, IT leadership, and occasionally regulators, to communicate findings and recommendations clearly and professionally.Contribute to the development of reports and client deliverables that summarize observations, root causes, and practical recommendations for risk mitigation and process improvement.Build foundational skills in areas such as cybersecurity, cloud computing, identity and access management, data analytics, automation tools, and industry-specific regulations (e.g., HIPAA, SEC, FFIEC).Approach new challenges with curiosity and a critical-thinking mindset, learning from diverse projects and client environments.Participate in team collaboration, coaching, and knowledge-sharing to foster a supportive and high-performance culture.Support coaching and review of Staff work, providing feedback and knowledge sharing.Basic Qualifications:Chartered Accountant, MBA, CMA, bachelor’s degree in information systems, Computer Science, Information Technology, or related fields.2-4 years of experience in IT internal audit, risk management, or consulting.Basic understanding of IT controls, IT SOX, system development lifecycle (SDLC), and IT governance frameworks.Familiarity with tools such as Microsoft Excel, Microsoft Word, Microsoft PowerPoint, Workiva, Audit Board, Archer, Teammate, ServiceNow, or other internal audit management software.Preferred Qualifications:Strong attention to detail and documentation accuracy.Foundational understanding of risk and control concepts.Ability to learn technical systems and IT processes quickly.General interest in the Information Technology field (emerging technologies, software development processes, computer networking, and authentication technologies).An industry accepted certification in progress (e.g., CIA, CISA) preferred.Experience with both business process and ITGC control experience a plusWe expect the candidate to uphold Crowe’s values of Care, Trust, Courage, and Stewardship. These values define who we are. We expect all of our people to act ethically and with integrity at all times.Our Benefits:At Crowe, we know that great people are what makes a great firm. We value our people and offer employees a comprehensive benefits package. Learn more about what working at Crowe can mean for you!How You Can Grow:We will nurture your talent in an inclusive culture that values diversity. You will have the chance to meet on a consistent basis with your Career Coach that will guide you in your career goals and aspirations. Learn more about where talent can prosper!More about Crowe:Crowe Capability Center – India, operating under the legal entity C3 India Delivery Centre LLP (formerly known as Crowe Horwath IT Services LLP) is a wholly owned subsidiary of Crowe LLP (U.S.A.), a public accounting, consulting and technology firm with offices around the world. Crowe LLP is an independent member firm of Crowe Global, one of the largest global accounting networks in the world. The network consists of more than 200 independent accounting and advisory firms in more than 130 countries around the world.Crowe does not accept unsolicited candidates, referrals or resumes from any staffing agency, recruiting service, sourcing entity or any other third-party paid service at any time. Any referrals, resumes or candidates submitted to Crowe, or any employee or owner of Crowe without a pre-existing agreement signed by both parties covering the submission will be considered the property of Crowe, and free of charge.We are committed to a merit-based hiring process, evaluating all candidates consistently using objective, job-related criteria such as relevant experience, demonstrated skills, measurable impact, and alignment with the role’s responsibilities, and making employment decisions in a fair and inclusive manner free from discrimination.