Director, Technology Risk Advisory

MorganFranklin Consulting LLC; Atlanta (GA); On-site; USD 90,000 - 150,000; Full time

Job summary

Join a forward-thinking consulting firm where you will tackle complex challenges for Fortune 100 companies and growth firms. This role offers the chance to drive business development and work on impactful projects related to internal audit and IT risk management. Collaborate with seasoned professionals and leverage your expertise in SOX compliance and technology risks. The dynamic environment encourages continuous learning and career advancement, making it an exciting opportunity for those passionate about making a difference in the consulting landscape.

Qualifications

• 10+ years in professional services with expertise in SOX and IT risk.
• Certifications like CPA, CIA, CISA, or CISSP are required.
• Strong knowledge of IT controls and governance frameworks.

Responsibilities

• Shape strategic direction and drive business development.
• Execute internal audits and IT risk management activities.
• Lead project teams and mentor junior staff.

Skills

SOX Compliance

IT Risk Management

Internal Audit

Data Analytics

Business Development

ERP Applications

Cloud Computing

Cybersecurity

Education

Bachelor's in Business Administration

Accounting

Management Information Systems

Tools

SAP

NetSuite

Oracle Cloud

PeopleSoft

Microsoft Dynamics

Fastpath

Workiva

AuditBoard

Job description

We deliver unparalleled opportunities for growth and career advancement. Our dynamic, entrepreneurial culture supports your journey every step of the way.

Embrace new challenges and deliver real value to some of the world's most influential Fortune 100 brands, growth companies transforming their industries, and mid-market firms that need help navigating the defining moments of their lifecycle. Work side by side with business leaders to solve complex client challenges and make a true impact. Love what you do as part of a diverse organization committed to collaboration and continuous learning.

The Team - Information Technology Risk within Risk & Regulatory Advisory Services

Our team is comprised of a powerful mix of seasoned professionals who have worked in both public accounting and industry, developing internal control solutions for both existing and emerging technologies. We take a comprehensive approach to help clients navigate through internal audit, risk, and control activities. We work as a broader team to address a wide range of business needs across the organization.

Your Impact

1. You will be responsible for helping to shape the strategic direction of the practice.
2. Drive business development, both by expanding and growing existing accounts and pursuing new client opportunities for the firm.
3. Work with emerging growth companies and established enterprises (both publicly traded and privately held) on a wide variety of projects including Sarbanes-Oxley ("SOX") readiness and compliance, internal audit, and enterprise risk management ("ERM").
4. Assist companies with implementing and assessing the effectiveness of SOX compliance programs, including activities such as:
   
   • Conducting risk assessments and system scoping,
   • Conducting walkthroughs and documenting end-to-end technology processes, identifying risks and key controls, using narratives,
   • Documenting and assessing the design and effectiveness of key IT general controls ("ITGC") and IT application controls ("ITAC"),
   • Executing testing to validate the operating effectiveness of controls,
   • Evaluating controls deficiencies to determine impact and significance,
   • Identifying and implementing effective and efficient plans to remediate control deficiencies,
   • Summarizing and documenting results of work performed including management reporting.
5. Execute internal audit and IT risk management activities to support our client's risk management initiatives.
6. Demonstrate subject matter expertise on technology risks and internal control solutions associated with ERP, SaaS, IT infrastructure, and cloud platforms.
7. Create and deliver presentations on technical concepts, project work plans, delivery approach, milestones, and results to client stakeholders.
8. Review team progress to ensure compliance with work program, professional standards, budgets, deliverables, and deadlines.
9. Identify, design, and implement creative business solutions to continually improve the firm's services, methodologies, and approaches.
10. Leverage firm partnerships and tools to deliver efficient and effective approaches to implement and assess risks relating to information security and change management.
11. Apply subject matter expertise in areas such as data analytics to enhance approaches to internal audits and control assessments.
12. Understand the breadth of services offered by Risk & Regulatory, as well as MorganFranklin holistically, to be able to identify additional opportunities at our clients.
13. Direct and facilitate teams, working with different groups within the organization (technology, accounting, finance, operations).
14. Manage existing and prospective client relationships with an eye toward identifying and closing on new business opportunities.
15. Lead project teams, share your individual subject matter expertise, and be a primary liaison to our clients.
16. Actively participate in career development activities and technical training of staff.
17. Mentor and develop team members.
18. Establish credibility as a trusted advisor.

Your Experience

Minimum Qualifications:

• 10+ years of recent professional services experience (public accounting or advisory firm). 5+ years of professional services experience may be combined with applicable IT risk management and internal controls experience with a Fortune 500 organization to meet the minimum requirement.
• Bachelor's degree in Business Administration, Accounting, Management Information Systems or a related field.
• One or more of the following risk-related certifications: CPA, CIA, CISA, or CISSP.
• Demonstrated track record of technical expertise with SOX, IT risk management, and internal audit.
• Subject Matter Expert on select ERP applications such as SAP, NetSuite, Oracle Cloud, PeopleSoft, or Microsoft Dynamics.
• Detailed understanding of Sarbanes-Oxley (SOX) compliance and PCAOB requirements.
• Experience implementing and assessing controls over highly automated business processes.
• Knowledge of IT leading practices to provide clients with effective and practical recommendations.
• Knowledge and application of IT controls and governance frameworks such as SOC 1/2, COBIT, NIST (CSF, 800-53, and 800-171), ITIL, and ISO 27001/2.
• Knowledge of emerging technology risks, including cloud computing, agile development/CICD, cybersecurity, and privacy.
• Knowledge of best practices for authentication, authorization, and change management.
• Strong foundational knowledge of infrastructure and platform components such as Windows, Linux, Unix, Active Directory, SQL, MySQL, Open Source, and Oracle.
• Strong track record of meeting business development targets and developing thought leadership materials.
• Proven ability to lead, motivate, and build teams that deliver services and solutions that surpass client expectations.
• Ability to lead workshops, including gathering/documenting requirements and use-cases and recommending envisioned processes.
• History of developing risk and compliance thought leadership.
• Experience developing detailed work plans for project activities within scope of application responsibility.
• Flexibility to travel at least 25%.

Preferred Qualifications:

• Experience managing up to 15 IT risk projects concurrently.
• Experience designing and implementing internal controls in conjunction with ERP implementation projects.
• Experience performing platform security assessments, implementing information security solutions, performing segregation of duties assessments using automated solutions (e.g., Fastpath), and implementing GRC solutions (e.g., Workiva, AuditBoard).

Helping all candidates find great careers is our goal. The information you provide here is secure and confidential.

We are now directing you to the original job posting. Please apply directly for this job at the employer’s website.