IT Audit, Cybersecurity & Risk Manager (HITRUST)

Baker Tilly Advisory Group, LP; Southfield (MI); On-site; USD 124,000 - 235,000; Full time

Job summary

Baker Tilly Advisory Group, LP seeks an IT Audit, Cybersecurity & Risk Manager (HITRUST) to join its growing Risk Advisory practice in Southfield, Michigan.

You will lead IT risk assessments, develop controls, and advise clients on governance, cyber defense, and regulatory compliance while mentoring teammates and delivering high-quality client service.

Qualifications

• 5+ years in risk advisory, internal or external audit, with IT controls focus.
• HITRUST, HIPAA, NIST CSF, NIST 800-53 experience preferred.
• CPA, CISA, CCSFP or CISSP designation(s) required.

Responsibilities

• Assess IT risk across client processes and controls.
• Develop controls and governance programs for clients.
• Prepare executive summaries and engagement documentation.
• Engage with client executives and manage staffing and profitability.
• Support firm-wide learning and development.

Skills

Risk advisory

IT audit

Cybersecurity

Internal controls

SOC 1/2

HITRUST

HIPAA

NIST CSF

NIST 800-53

Cloud audit

Security+

Communication

Education

Bachelor’s degree in accounting or related field

Job description

OverviewBaker Tilly is a leading advisory, tax and assurance firm, providing clients with a genuine coast-to-coast and global advantage in major regions of the U.S. and in many of the world’s leading financial centers – New York, London, San Francisco, Los Angeles, Chicago and Boston. Baker Tilly Advisory Group, LP and Baker Tilly US, LLP (Baker Tilly) provide professional services through an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable laws, regulations and professional standards. Baker Tilly US, LLP is a licensed independent CPA firm that provides attest services to its clients. Baker Tilly Advisory Group, LP and its subsidiary entities provide tax and business advisory services to their clients. Baker Tilly Advisory Group, LP and its subsidiary entities are not licensed CPA firms.Baker Tilly Advisory Group, LP and Baker Tilly US, LLP, trading as Baker Tilly, are independent members of Baker Tilly International, a worldwide network of independent accounting and business advisory firms in 141 territories, with 43,000 professionals and a combined worldwide revenue of $5.2 billion. Visit bakertilly.com or join the conversation on LinkedIn, Facebook and Instagram.Please discuss the work location status with your Baker Tilly talent acquisition professional to understand the requirements for an opportunity you are exploring.Baker Tilly is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status, gender identity, sexual orientation, or any other legally protected basis, in accordance with applicable federal, state or local law.Any unsolicited resumes submitted through our website or to Baker Tilly Advisory Group, LP, employee e-mail accounts are considered property of Baker Tilly Advisory Group, LP, and are not subject to payment of agency fees. In order to be an authorized recruitment agency ("search firm") for Baker Tilly Advisory Group, LP, there must be a formal written agreement in place and the agency must be invited, by Baker Tilly's Talent Attraction team, to submit candidates for review via our applicant tracking system.Job Description:ResponsibilitiesAre you interested in joining one of the fastest growing consulting and accounting firms in the country?Would you like the ability to join a highly dynamic team focused on providing exceptional client service in the areas of risk and advisory?If yes, consider joining Baker Tilly (BT) as an IT Audit, Cybersecurity & Risk Manager (HITRUST)! Our Risk Advisory practice provides a full spectrum of services to help our clients assess their risks, develop strategies to compete in an ever-changing business environment, and achieve their goals and objectives. All of this is accomplished through deep industry knowledge of risk, governance, internal audit, compliance, IT, and cybersecurity best practices.As one of the fastest growing firms in the nation, BT has the ability to offer you upward career trajectory, flexibility in how and where you get your work done and meaningful relationships with clients, teammates and leadership who truly care about you and your development.Does this describe you?You want to continue to expand your work experiences and hone your skills as a comprehensive risk professional in the areas of compliance, enterprise risk management, governance, internal controls, and data analyticsYou crave the opportunity to be part of a fast growing, entrepreneurial risk consulting practice where your hard work and creativity will be rewardedYou do your best work when you are part of a talented, down-to-earth team that thrives in collaboration and truly enjoys working togetherYou feel valued when you are provided the resources and support to continually sharpen your technical skills and build your career now, for tomorrowWhat you will do:Work closely with client executives and management teams to understand their businesses and assist in identifying and managing financial and operational risks within their business processes and systemsDevelop in-depth knowledge of clients’ businesses and industries by having direct client interaction while working on multiple aspects of an engagementThink independently and strategically about your clients’ business, systems and risks providing recommendations for business and process improvements based upon knowledge gained relative to the client’s operations, processes and business objectivesProvide strategic business advice to clients by assisting in the implementation of new processes and controls that address key risksAssess, manage and optimize information technology risk across a wide range of areas, including cybersecurity, IT strategy and governance, IT regulatory and compliance requirements, and business continuity and disaster recovery.Review clients' processes and controls against industry frameworks, identifying gaps in design and execution, and communicating issues and recommendations to clientsDraft comprehensive executive summaries and final reports for delivery to the client, documenting and reviewing engagement work papers in accordance with industry-accepted internal audit methodologiesAct as a valued business advisor, build relationships and communicate effectively with the client to provide superior client serviceFacilitate professional and effective presentations to internal and external audiencesContinue to develop your knowledge and experience working with a variety of technology environments, platforms, applications and tools/utilitiesAssist with managing client engagement staffing, billings/collections, and ensure client profitability targets are metUtilize your entrepreneurial skills to network and build strong relationships internally and externally with clients and the communityInvest in your professional development individually and through participation in firm wide learning and development programsSupport the growth and development of team members through the Baker Tilly Care and Teach philosophy, helping associates meet their professional goalsEnjoy friendships, social activities and team outings that encourage a work-life balanceQualificationsBachelor’s degree in accounting, finance, or a related programCPA, CISA, CCSFP or CISSP designation(s) required5+ year(s) experience with risk advisory, internal/external audit, business process reengineering, and/or internal controls with focus on IT related subject matter (e.g., SOC 1/2 Exams, HITRUST, HIPAA, NIST CSF, NIST 800-53)Experience performing HITRUST engagements preferred. Open to candidates willing to obtain HITRUST Certification in the futureExperience with Security+ is preferredExperience with Cloud audit experience and certifications is preferredExperience as a client serving professional for a consulting firm desiredExcellent analytical, technical, and problem-solving skills, with strong attention to detailExceptional verbal and written communication, collaboration, and time management skillsThe compensation range for this role is $123,840 to $234,770. Actual compensation is influenced by a variety of factors including but not limited to skills, experience, qualifications, and geographic location.