IT Risk Senior Associate: Lead IT Controls & SOX

Grant Thornton (US); Charlotte (NC); Híbrido; USD 101.000 - 129.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Discretionary annual bonus

Hybrid work model

Comprehensive benefits

Descripción de la vacante

Grant Thornton US is seeking an IT Risk Senior Associate to help clients understand and address IT risks, controls, and compliance. You will collaborate with teams to execute IT risk management, internal control engagements, and SOX-related testing across client environments.

The role emphasizes proficiency in ITGCs, ERP controls, and risk-based testing, with opportunities to work across Advisory lines and travel as needed.

Formación

• Bachelor’s degree or equivalent in a related field.
• Minimum 2 years in a professional services firm or internal audit.
• CISA, CISSP, CISM or CPA preferred.
• Understanding of IT risk management standards (COBIT, NIST CSF).
• Experience evaluating IT general controls and IT controls for SOX.
• Experience with ERP controls (SAP, Oracle, PeopleSoft, JD Edwards) a plus.
• Strong ITGC, IAM, OS, DB knowledge and analytics tools experience.

Responsabilidades

• Participate in client engagements from start to finish, executing IT risk and internal control tasks.
• Assess IT control design and operating effectiveness, including SOX compliance.
• Evaluate ERP configurations and security for risk and control gaps.
• Collaborate with Advisory teams and client personnel to deliver results.
• Communicate findings clearly and meet performance metrics.
• Travel as needed.

Conocimientos

IT risk management

SOX/compliance

Internal audit

Communication

Project management

Client service

Analytical mindset

Educación

Bachelor’s degree in Accounting, Finance, IT, MIS

Herramientas

SAP

Oracle

PeopleSoft

JD Edwards

SAP ECC

S/4 HANA

Descripción del empleo

Grant Thornton US is seeking an IT Risk Senior Associate to help clients understand and address IT risks, controls, and compliance. You will collaborate with teams to execute IT risk management, internal control engagements, and SOX-related testing across client environments.

The role emphasizes proficiency in ITGCs, ERP controls, and risk-based testing, with opportunities to work across Advisory lines and travel as needed.