IT Risk & Controls Senior Associate — Hybrid

Grant Thornton (US); Boston (MA); Hybrid; USD 101,000 - 129,000; Full time

Job summary

Grant Thornton (US) is seeking an IT Risk Senior Associate to help clients understand and address IT risk, internal controls, and SOX compliance. You will work with cross‑functional teams to design, test, and report on control effectiveness while growing your expertise in IT risk management.

The role emphasizes collaboration across advisory teams, client service excellence, and delivering high‑impact risk solutions. Hybrid work with in‑person days is expected, and travel is required as needed.

Qualifications

• Bachelor’s degree required in accounting, finance, IT, MIS, or related field
• Minimum 2 years of relevant experience in a professional services firm or internal audit
• Certifications preferred: CISA, CISSP, CISM, CPA
• Understanding of IT risk management and cybersecurity standards (COBIT, NIST CSF)
• Experience assessing IT risk controls, SOX, ERP configurations
• Experience with ERP/IT controls across SAP, Oracle, PeopleSoft, JD Edwards
• Familiarity with GRC/IAM and OS/DB/Network tech areas
• Strong communication, analytical, and project management skills
• Willingness to travel as needed

Responsibilities

• Actively participate in client engagements from start to completion, focusing on IT internal audit and control assessments
• Test IT control design and operating effectiveness for SOX and other compliance requirements
• Understand clients’ industry and IT environments to tailor risk assessments
• Collaborate across Grant Thornton service lines to deliver integrated solutions
• Deliver services per project leadership and client expectations
• Manage multiple engagements in a growing team, meeting performance metrics
• Communicate findings clearly and support client improvements

Skills

Client service

Communication

Analytical

Project management

Travel ready

Education

Bachelor’s degree in Accounting, Finance, IT, MIS, or related

Tools

SAP

Oracle

PeopleSoft

JD Edwards

SAP ECC

S/4 HANA

GRC

IAM

ACL

Idea

QlikView

QlikSense

Tableau

Spotfire

Job description

Grant Thornton (US) is seeking an IT Risk Senior Associate to help clients understand and address IT risk, internal controls, and SOX compliance. You will work with cross‑functional teams to design, test, and report on control effectiveness while growing your expertise in IT risk management.

The role emphasizes collaboration across advisory teams, client service excellence, and delivering high‑impact risk solutions. Hybrid work with in‑person days is expected, and travel is required as needed.