Senior IT Risk & Controls Manager

CFGI; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

CFGI is expanding its IT Risk Advisory practice and seeks a Manager to lead client engagements across diverse industries. You will oversee IT internal audit, SOX compliance, ITGCs, SOC reporting, and cybersecurity governance while mentoring consultants and guiding project delivery.

You will review process narratives, risk/control matrices, and testing documentation, develop practical recommendations, and present client-ready materials to executives and Audit Committees.

Qualifications

• 5–9 years in IT audit, IT risk advisory, information security, or related fields.
• Experience leading IT internal audit, IT SOX, ITGCs, SOC reporting, or technology risk engagements.
• Familiarity with IT governance and control frameworks (SOX ITGCs, COSO, SOC 1/2).

Responsibilities

• Lead IT risk advisory engagements for diverse client industries.
• Oversee ITGCs, SOX compliance, SOC reporting, risk assessments, and cybersecurity governance.
• Review process documentation and audit workpapers; plan engagements and budgets.
• Develop client-ready reports, executive presentations, and Audit Committee materials.
• Mentor Consultants and contribute to proposals and business development.

Skills

IT audit

IT risk advisory

Information security

Public accounting

Leadership

Regulatory compliance

Education

Bachelor's degree in Computer Science / Information Systems / IT / Cybersecurity / MIS / Accounting

MBA or graduate degree (nice to have)

Tools

COSO

SOC reporting

Job description

CFGI is expanding its IT Risk Advisory practice and seeks a Manager to lead client engagements across diverse industries. You will oversee IT internal audit, SOX compliance, ITGCs, SOC reporting, and cybersecurity governance while mentoring consultants and guiding project delivery.

You will review process narratives, risk/control matrices, and testing documentation, develop practical recommendations, and present client-ready materials to executives and Audit Committees.