IT Risk Advisory - Manager

CFGI; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

CFGI is expanding its IT Risk Advisory practice and seeks a Manager to lead client engagements across diverse industries. You will oversee IT internal audit, SOX compliance, ITGCs, SOC reporting, and cybersecurity governance while mentoring consultants and guiding project delivery.

You will review process narratives, risk/control matrices, and testing documentation, develop practical recommendations, and present client-ready materials to executives and Audit Committees.

Qualifications

• 5–9 years in IT audit, IT risk advisory, information security, or related fields.
• Experience leading IT internal audit, IT SOX, ITGCs, SOC reporting, or technology risk engagements.
• Familiarity with IT governance and control frameworks (SOX ITGCs, COSO, SOC 1/2).

Responsibilities

• Lead IT risk advisory engagements for diverse client industries.
• Oversee ITGCs, SOX compliance, SOC reporting, risk assessments, and cybersecurity governance.
• Review process documentation and audit workpapers; plan engagements and budgets.
• Develop client-ready reports, executive presentations, and Audit Committee materials.
• Mentor Consultants and contribute to proposals and business development.

Skills

IT audit

IT risk advisory

Information security

Public accounting

Leadership

Regulatory compliance

Education

Bachelor's degree in Computer Science / Information Systems / IT / Cybersecurity / MIS / Accounting

MBA or graduate degree (nice to have)

Tools

COSO

SOC reporting

Job description

CFGI, founded in 2000, is a dynamic and fast-growing financial consulting firm, serving as the trusted partner to CFOs and their organizations. We help clients tackle complex challenges across accounting, financial reporting, transactions, risk management, regulatory compliance, and digital transformation. We blend deep technical expertise with a hands‑on, entrepreneurial approach to help the world’s leading companies move forward with confidence. We are actively expanding our IT Risk Advisory practice and seeking experienced professionals ready to deliver measurable impact for clients across a variety of industries.

We are seeking a results-driven Manager to lead IT risk advisory engagements for clients across a variety of industries. Managers oversee day-to-day engagement delivery, mentor Consultants, collaborate with senior client stakeholders, and serve as trusted advisors in delivering IT internal audit, SOX compliance, technology risk, cybersecurity governance, and IT controls advisory services.

What you might expect:

• Lead IT internal audit, IT SOX compliance, and technology risk advisory engagements across a variety of industries.
• Manage IT General Controls (ITGCs), SOX compliance, SOC reporting, IT risk assessments, cybersecurity governance, and technology compliance engagements.
• Review IT process documentation, including process narratives, flowcharts, risk and control matrices, testing documentation, and audit workpapers.
• Lead engagement planning, including project scopes, risk assessments, testing strategies, project plans, and audit procedures.
• Identify opportunities to strengthen IT governance, internal controls, cybersecurity, and operational effectiveness while developing practical recommendations for clients.
• Develop and present client-ready reports, executive presentations, and Audit Committee materials.
• Manage project workstreams, engagement economics, timelines, budgets, and client deliverables.
• Mentor Consultants by providing technical guidance, coaching, and performance feedback.
• Participate in proposal development, client relationship management, recruiting, and business development initiatives.

What you must have:

• 5-9 years of experience in IT audit, IT risk advisory, information security, systems implementation, public accounting, consulting, and/or corporate IT risk.
• Experience leading IT internal audit, IT SOX compliance, IT General Controls (ITGCs), information security, SOC reporting, or technology risk engagements.
• Experience applying IT governance and control frameworks, including SOX ITGCs, COSO, SOC 1, and/or SOC 2.

What sets you apart:

• Experience leading IT internal audit, SOX compliance, technology risk, cybersecurity governance, or compliance assessments.
• Experience developing and reviewing IT process documentation, including process narratives, flowcharts, risk and control matrices, audit workpapers, and testing documentation.
• Experience performing or leading IT control design assessments, walkthroughs, testing procedures, remediation activities, and technology control improvement initiatives.
• Experience applying cybersecurity and IT governance frameworks such as ISO 27001, NIST Cybersecurity Framework (CSF), COBIT, HIPAA, FAIR, PCI DSS, or similar regulatory and compliance standards.
• Experience leading project teams, managing engagement economics, mentoring junior professionals, and serving as a primary point of contact for client stakeholders.
• Experience contributing to proposal development, business development, or practice initiatives.

Nice to have:

• CISA, CIA, CISSP, CPA, Security+, or other relevant professional certification.
• Bachelor’s degree in Computer Science, Information Systems, Information Technology, Cybersecurity, Management Information Systems, Accounting, or a related field.
• MBA or other relevant graduate degree.
• Experience supporting ERP implementations, cloud environments, identity and access management (IAM), governance, risk and compliance (GRC) technologies, or technology transformation initiatives.

Who thrives here:

• Excellent interpersonal, written, and verbal communication skills with the ability to build relationships across client and engagement teams.
• Proactive in identifying client needs and developing trusted client relationships.
• Highly organized with the ability to manage multiple workstreams and competing priorities.
• Strong analytical and structured problem-solving abilities.
• Entrepreneurial, self-motivated, adaptable, ethical, and dependable.
• High energy with a commitment to delivering exceptional client service while mentoring and developing junior team members.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.