IT Audit, Cybersecurity & Risk Advisory Senior (HITRUST)

Baker Tilly US; Milwaukee (WI); On-site; USD 85,910 - 162,890; Full time

Job summary

Baker Tilly US is seeking an IT Audit, Cybersecurity & Risk Senior Consultant for their Risk Advisory practice to provide expert client service in managing technology risks. The ideal candidate will have a strong background in IT audit and cybersecurity, with opportunities for professional growth and development.

This role involves working directly with clients to enhance their processes and controls in a fast-paced advisory environment. Compensation ranges from $85,910 to $162,890, dependent on skills and experience.

Qualifications

• Bachelor’s degree in management, computer information systems, or related field.
• CISA, CISSP, CISM, CIA, or CPA certifications preferred.
• 3+ years of experience with IT audit or cybersecurity.
• Experience performing HITRUST engagements preferred.
• Excellent analytical and problem-solving skills.

Responsibilities

• Work closely with client executives to identify and manage financial and operational risks.
• Provide strategic business assurance by implementing new processes and controls.
• Review clients’ processes against industry frameworks and communicate gaps.
• Assist in drafting comprehensive reports and executive summaries.

Skills

IT audit

cybersecurity

analytical skills

problem-solving skills

communication

time management

Education

Bachelor’s degree in management/ computer information systems or related

Tools

HITRUST

cloud audit

Job description

Position Overview

Baker Tilly is an advisory, tax, and assurance firm seeking an IT Audit, Cybersecurity & Risk Senior Consultant to join our Risk Advisory practice. The role focuses on providing client service in information technology risk, governance, internal audit, compliance, and cybersecurity.

Responsibilities

• Work closely with client executives and management teams to understand their businesses and assist in identifying and managing financial and operational risks within their business systems to ensure technology risks are managed.
• Develop in-depth knowledge of clients’ businesses and industries by having direct client interaction while working on multiple aspects of an engagement.
• Think independently and strategically about clients’ business, systems and risks, providing recommendations for business and process improvements based on the client’s operations and objectives.
• Provide strategic business assurance to clients by assisting in the implementation of new processes and controls that address key risks.
• Assess, manage and optimize information technology risk across a wide range of areas, including cybersecurity, IT strategy and governance, IT regulatory and compliance requirements, and business continuity.
• Review clients’ processes and controls against industry frameworks, identifying gaps in design and execution, and communicating issues and recommendations to clients.
• Assist in the development of audit programs and the execution of internal audits and IT control assessments in the areas of:
  • IT strategy and governance
  • IT operations, business continuity and disaster recovery
  • Cybersecurity
  • Third‑party risk
  • ITGC and application controls
  • SOC reporting
  • Regulatory and compliance requirements
• Assist in drafting comprehensive executive summaries and final reports for delivery to the client, documenting and reviewing engagement work papers in accordance with industry‑accepted internal audit methodologies.
• Act as a valued business advisor, build relationships and communicate effectively with the client to provide superior client service.
• Facilitate professional and effective presentations to internal and external audiences.
• Continue to develop your knowledge and experience working with a variety of technology environments, platforms, applications and tools/utilities.
• Demonstrate the desire to continually grow, learn and develop skills and knowledge through external and internal education, training and cross‑training opportunities to maximize personal contribution to the organizational goals and ongoing career development.
• Utilize your entrepreneurial skills to network and build strong relationships internally and externally with clients.
• Support the growth and development of team members through the Baker Tilly Care and Teach philosophy, helping associates meet their professional goals.
• Enjoy friendships, social activities and team outings that encourage a work‑life balance.

Qualifications

• Bachelor’s degree in management/ computer information systems, computer science, accounting information systems, computer engineering, industrial engineering, or related program.
• CISA, CISSP, CISM, CIA, or CPA certifications preferred.
• Three (3+) years of experience with IT audit or cybersecurity.
• Experience performing HITRUST engagements preferred; open to candidates willing to obtain HITRUST certification in the future.
• Experience as a client‑serving professional for a consulting firm desired.
• Experience with cloud audit and certifications preferred.
• Excellent analytical, technical and problem‑solving skills with strong attention to detail.
• Exceptional verbal and written communication, collaboration and time‑management skills.

Compensation

The pay rate range for this position is $85,910 to $162,890. Actual compensation is influenced by a variety of factors including applicant skills, prior experience, qualifications, degrees, professional certifications, work arrangements and geographic location. Baker Tilly offers a comprehensive compensation and benefits package to eligible employees.

Baker Tilly is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status, gender identity, sexual orientation, or any other legally protected basis, in accordance with applicable federal, state or local law.