Senior IT Risk & Controls Analyst

Grant Thornton; Cleveland (OH); Hybrid; USD 101,000 - 129,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Grant Thornton in the United States is seeking an IT Risk Senior Associate to help clients understand and address IT risk, with a focus on risk management, internal controls, and SOX compliance. You will work on co-sourced and outsourced IT internal audit engagements and contribute to the design and operating effectiveness of IT controls.

You’ll collaborate with teams across advisory and other service lines to deliver high-quality risk assessments and recommendations, while developing your

Qualifications

• Bachelor’s degree in Accounting, Finance, Information Technology, MIS, or a related field.
• Minimum 2 years of related work experience with a professional services firm, or part of an internal audit function.
• CISA, CISSP, CISM, CPA license/certification preferred.
• Understanding of IT risk management and cybersecurity risk management standards (COBIT, NIST CSF).
• Experience assessing the design and operating effectiveness of IT risk management and IT controls (ITGC, application controls).
• Experience assessing configuration and controls of ERP systems (SAP, Oracle, PeopleSoft, JD Edwards).
• Experience assessing SAP ECC, S/4HANA, BASIS and security administration, process controls (a plus).
• Strong understanding of IT general controls and external financial statement auditors’ focus areas.
• Experience assessing GRC and IAM solutions (a plus).
• Experience assessing OS, DB, and IT infrastructure components; proficient with analytics/visualization tools (ACL/IDEA/Qlik/Tableau).

Responsibilities

• Actively participate in client engagements from start to completion, focusing on IT internal audit, internal control assessments, and IT risk management.
• Obtain an understanding of clients’ industry, objectives, strategy, operations, processes, IT systems, and controls.
• Execute IT control design and operating effectiveness tests based on scope and risk factors.
• Bring an innovative and analytical mindset to help clients solve business issues and improve project execution.
• Work with the project team and client to deliver services per project leadership and expectations.
• Collaborate with colleagues across advisory and other Grant Thornton service lines.
• Meet or exceed defined performance metrics.
• Other duties as assigned.

Skills

IT risk management

SOX compliance

Internal controls

Auditing

Analytical mindset

Client service

Communication skills

Travel willingness

Education

Bachelor’s degree in Accounting, Finance, Information Technology, MIS, or a related field

Minimum 2 years of related work experience with a professional services firm, or part of an internal audit function

Tools

ACL

IDEA

QlikView

QlikSense

Tableau

Spotfire

Job description

Grant Thornton in the United States is seeking an IT Risk Senior Associate to help clients understand and address IT risk, with a focus on risk management, internal controls, and SOX compliance. You will work on co-sourced and outsourced IT internal audit engagements and contribute to the design and operating effectiveness of IT controls.

You’ll collaborate with teams across advisory and other service lines to deliver high-quality risk assessments and recommendations, while developing your