IT Finance Audit & Compliance Consultant

JSR Tech Consulting; New Jersey; Hybrid; USD 100,000 - 150,000; Full time

Job summary

JSR Tech Consulting in Northern New Jersey seeks a Mid-Level IT Finance Audit & Compliance Consultant to support governance, risk, audit, and regulatory compliance programs across client environments. The role collaborates with IT, Finance, Internal Audit, Security, and business stakeholders to assess controls and support audit activities.

The ideal candidate has 5–8 years of experience in IT audit, compliance, risk management, cybersecurity governance, or financial systems controls, with strong

Qualifications

• Bachelor's degree in Information Systems, Accounting, Finance, Cybersecurity, Business, or related field.
• 5+ years of IT Audit, SOX Compliance, IT Risk Management, Information Security Governance, or Internal Controls.

Responsibilities

• Support IT and Finance audit engagements (internal, external, regulatory).
• Test IT General Controls (ITGCs) and application controls supporting financial reporting.
• Assist with SOX compliance activities, including control documentation, testing, and remediation tracking.
• Conduct compliance assessments against policies and industry standards.
• Prepare audit workpapers, compliance reports, and risk assessments.

Skills

IT Audit

SOX Compliance

IT Risk Management

Information Security Governance

Internal Controls

Education

Bachelor's degree

Tools

ServiceNow GRC

AuditBoard

Archer

RSA Archer

Job description

Contract to hire position with a financial firm in Northern NJ.
Hybrid-3 days on site

Position Title

IT Finance Audit & Compliance Consultant

Position Overview

JSR Tech Consulting is seeking a Mid-Level IT Finance Audit & Compliance Consultant to support governance, risk, audit, and compliance initiatives across client environments. The ideal candidate will work closely with IT, Finance, Internal Audit, Security, and business stakeholders to assess controls, support audit activities, and ensure compliance with regulatory and industry frameworks, including SOX, ISO 27001, ISO 9001, and NIST Cybersecurity Framework (CSF).
This role is suited for professionals with 5-8 years of experience in IT audit, compliance, risk management, cybersecurity governance, or financial systems controls.

Key Responsibilities

• Support IT and Finance audit engagements, including internal, external, and regulatory audits.
• Perform testing of IT General Controls (ITGCs) and application controls supporting financial reporting.
• Assist with SOX compliance activities, including control documentation, testing, evidence collection, and remediation tracking.
• Conduct compliance assessments against organizational policies and industry standards.
• Prepare audit workpapers, compliance reports, and risk assessments.

Risk Management & Controls

• Evaluate the effectiveness of IT and business controls.
• Identify compliance gaps, control deficiencies, and risk exposures.
• Support remediation planning and corrective action tracking.
• Participate in vendor and third-party risk assessments.
• Maintain risk and control matrices (RCMs).

Security & Governance

• Assist with compliance initiatives aligned to:
  • ISO 27001 Information Security Management Systems (ISMS)
  • ISO 9001 Quality Management Systems (QMS)
  • Sarbanes-Oxley (SOX)
  • NIST Cybersecurity Framework (CSF)
  • NIST SP 800-53 Security Controls
• Review user access management, change management, backup/recovery, and cybersecurity controls.
• Support policy and procedure development and updates.

Documentation & Reporting

• Develop and maintain compliance documentation, process flows, and control narratives.
• Track audit findings and remediation status.
• Provide compliance status reporting to management and project stakeholders.
• Support audit readiness and continuous improvement initiatives.

Required Qualifications

• Bachelor's degree in Information Systems, Accounting, Finance, Cybersecurity, Business, or related field.
• 5+ years of experience in:
  • IT Audit
  • SOX Compliance
  • IT Risk Management
  • Information Security Governance
  • Internal Controls
• Understanding of ITGCs, access controls, change management, and financial systems controls.
• Experience working with auditors and compliance teams.
• Strong analytical, documentation, and communication skills.

Preferred Qualifications

• Experience supporting public company SOX programs.
• Knowledge of ERP platforms such as SAP, Oracle, Workday, or Microsoft Dynamics.
• Experience with Governance, Risk, and Compliance (GRC) tools such as:
  • ServiceNow GRC
  • AuditBoard
  • Archer
  • RSA Archer
• Familiarity with cloud environments (Azure, AWS, or Google Cloud).

Preferred Certifications

• CISA (Certified Information Systems Auditor)
• CRISC (Certified in Risk and Information Systems Control)
• CISSP (Certified Information Systems Security Professional)
• CIA (Certified Internal Auditor)
• CPA (Certified Public Accountant)
• ISO 27001 Lead Auditor or Lead Implementer
• Security+ or equivalent cybersecurity certification

Core Competencies

• SOX Compliance
• IT General Controls (ITGC)
• Internal & External Audits
• ISO 27001 Compliance
• ISO 9001 Compliance
• NIST Cybersecurity Framework (CSF)
• Risk Assessments
• Governance, Risk & Compliance (GRC)
• Financial Systems Controls
• Control Testing & Documentation
• Audit Readiness
• Stakeholder Communication

Experience Level

Mid-Level (5-8yrs)