IT Audit Consultant - ITGC - Financial Services

RGP; Pittsburgh (Allegheny County); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life Insurance

Disability Insurance

401(k)

Job summary

RGP is seeking an experienced IT Audit Consultant to support a large financial services organization, focusing on ITGC design and operating effectiveness across technology environments. The role involves testing, evidence review, and documenting findings for remediation, with collaboration across IT, risk, and business teams.

You will work in a regulated banking context, leveraging strong ITGC knowledge, and communicate audit results to management.

Qualifications

• 5+ years of IT Audit, IT Risk, Technology Controls, or similar experience with significant ITGC exposure.
• Experience in banking or financial services environment.
• Solid understanding of ITGC domains: access management, change management, SDLC, IT operations.
• SOX ITGC environments knowledge and risk-based audit methodologies.

Responsibilities

• Perform IT audit and ITGC testing across applications, infrastructure, databases, and supporting technology environments.
• Evaluate the design and operating effectiveness of IT controls, including access management, privileged access, user provisioning/de-provisioning, SDLC, and backup controls.
• Execute control walkthroughs, develop testing procedures, review evidence, and document results.
• Identify control deficiencies and communicate findings to stakeholders.
• Assist with audit workpapers, risk assessments, testing documentation, and audit reports.
• Collaborate with control owners and technology teams to support remediation and validation.

Skills

IT Audit

ITGC Testing

Banking knowledge

SOX ITGC

Communication

Independent work

Education

Bachelor's degree or equivalent

Tools

Archer

ServiceNow GRC

AuditBoard

Job description

We are seeking an experienced IT Audit Consultant to support a large financial services organization with technology risk, controls, and audit initiatives. The consultant will leverage strong IT General Controls (ITGC) experience to assess the design and operating effectiveness of technology controls, identify control gaps, document findings, and support remediation efforts.

The ideal candidate will bring prior experience working within a banking or financial services environment, with a solid understanding of technology risks, regulatory expectations, internal controls, and audit methodologies. This individual should be comfortable working independently, partnering with technology and business stakeholders, and communicating audit findings to management.

Key Responsibilities

• Perform IT audit and ITGC testing across applications, infrastructure, databases, and supporting technology environments.
• Evaluate the design and operating effectiveness of IT controls, including:
  • User access and identity/access management
  • Privileged access
  • User provisioning and de-provisioning
  • Segregation of duties
  • Change management
  • System development lifecycle (SDLC)
  • Computer operations
  • Backup, recovery, and business continuity-related controls
• Execute control walkthroughs, develop testing procedures, review supporting evidence, and document testing results.
• Identify control deficiencies, technology risks, and process gaps and clearly communicate findings to stakeholders.
• Assist with development of audit workpapers, risk assessments, testing documentation, and audit reports.
• Work with control owners and technology teams to understand root causes and support remediation and validation activities.
• Assess IT controls supporting financially significant applications and business processes.
• Partner with Internal Audit, Technology Risk, Information Security, Compliance, Finance, and business teams throughout the engagement.
• Support audits and assessments involving regulatory requirements and industry control frameworks.
• Manage assigned audit activities and deliverables against established project timelines.

What you will work on

You will support a large banking client on a 6+ month IT Audit engagement, focusing primarily on IT General Controls (ITGCs) across the organization’s technology environment. You will perform control walkthroughs and testing, evaluate the design and operating effectiveness of controls, review supporting evidence, document audit results, and identify potential control gaps. Key areas may include user and privileged access, change management, SDLC, computer operations, and other technology controls supporting critical banking systems. You will collaborate with IT, business, risk, and audit stakeholders to communicate findings, support remediation efforts, and help ensure technology controls align with the expectations of a highly regulated financial services environment.

What you will bring

Required Qualifications

• 5+ years of IT Audit, IT Risk, Technology Controls, or similar experience, with significant hands‑on ITGC experience.
• Previous experience within the banking or financial services industry.
• Strong understanding of ITGC domains, particularly access management, change management, SDLC, and IT operations.
• Experience performing control walkthroughs, control testing, evidence review, deficiency identification, and audit documentation.
• Knowledge of SOX ITGC environments and risk‑based audit methodologies.
• Ability to evaluate complex technology processes and translate technical risks into clear business and control implications.
• Strong written and verbal communication skills with the ability to interact effectively with technology teams, control owners, auditors, and senior stakeholders.
• Ability to work independently in a fast‑paced, highly regulated environment.

Preferred Qualifications

• Experience auditing large, complex banking technology environments.
• Familiarity with regulatory expectations applicable to large financial institutions.
• Experience with cybersecurity controls, information security, cloud environments, third‑party technology risk, automated controls, and application controls.
• Familiarity with frameworks and standards such as COBIT, NIST, ISO 27001, COSO, and SOX.
• Experience using audit/GRC platforms such as Archer, ServiceNow GRC, or AuditBoard.
• Professional certifications such as CISA, CIA, CISSP, CRISC, or CPA are preferred but not required.

What you can expect

• An inspirational place for you to do your best work, be engaged in meaningful ways, and continually develop the skills, competencies and qualities that set our team apart.
• Compensation commensurate with your qualifications, experience, and other factors including geographic location, market and operational factors.
• Total Rewards include: Medical, Dental, Vision, Life Insurance, Disability Insurance, 401(k) Savings Plan, Employee Stock Purchase Plan, Professional Development Program, Paid Time Off and Paid Sick Time (in geographies where legally required).

What we do

At RGP, we're creating a future where businesses produce their best work without constraints. We've built a global network of over 2,600 experts across four regions, providing a comprehensive suite of solutions across on‑demand talent, next‑generation consulting, and outsourced services to support organizations at every stage of their growth journey. Trusted by Fortune 100 companies and emerging disruptors alike, we challenge conventional ways of working, drive growth, and pave the way for long‑term success through bold innovation and fearless collaboration. Our values guide everything we do and strengthen our commitment to people. By combining smart processes, human‑centered design, and advanced technology, we celebrate our team's excellence and ensure we grow together. We believe in the power of continuous learning and development to drive both individual and organizational success. It’s time to rethink how work gets done. Dare to Work Differently with RGP.

RGP is proud to be an Equal Opportunity Employer and committed to creating an inclusive environment for all employees. We do not discriminate on the basis of race, color, religion, national origin, gender, pregnancy, sexual orientation, gender identity, age, physical or mental disability, genetic information, veteran status, or any other legally protected trait and encourage all applicants to apply.