Staff Consultant - Risk (IT)

SC&H Group; Cockeysville, New York, Tysons (MD, NY, VA); On-site; USD 70,000 - 82,000; Full time

Benefits offered by this job

Health plan

Paid time off

Public holidays

401k

Annual firm trip

Job summary

SC&H Group is seeking a Staff Consultant in our Risk Consulting Practice focused on IT audit. You will apply IT audit, internal controls, and technology risk experience while developing business, technical, and project management skills.

You will perform IT internal audits and SOX 404 testing, assess IT risks, support control design, and document findings. Grow professional relationships with clients while advancing in a collaborative team environment.

Qualifications

• Bachelor’s degree in Accounting, Finance, Information Systems, Computer Science, or a related field.
• 1–3 years of related experience in IT audit, internal audit, SOX compliance, internal controls, or technology risk consulting.
• Working knowledge of ITGCs, SOX 404, and common control frameworks (COSO, COBIT, NIST).
• Familiarity with ERP, cloud platforms, databases, and how to assess their controls.
• CISA, CPA, CIA, or CISSP (or progress toward one) highly preferred.
• Strong integrity, values, and work ethic.

Responsibilities

• Perform IT internal audits and SOX 404 testing for clients, including ITGCs and application controls.
• Assess technology and information security risks across systems, infrastructure, and processes.
• Support IT consulting engagements, including control design and risk assessments.
• Review processes to provide independent risk and control assessments.
• Document controls and test results clearly in workpapers and report findings.
• Build client relationships and communicate with engagement leaders.
• Stay current on industry standards and regulatory developments.
• Use data analytics to improve audit approaches and service delivery.
• Demonstrate teamwork, integrity, leadership, and initiative.
• Learn SC&H service lines and identify client opportunities.

Skills

IT audit

SOX compliance

ITGCs

risk assessment

Education

Bachelor’s degree in Accounting, Finance, Information Systems, Computer Science, or related field

Job description

SC&H Group is searching for a talented, motivated professional to join our Risk Consulting Practice as a Staff Consultant focused on IT audit. You’ll apply your IT audit, internal control, and technology risk experience while building your business, technical, and project management skills in a challenging, rewarding environment.

SC&H’s Risk Consulting Practice delivers internal audit, IT audit, Sarbanes-Oxley (SOX) 404 compliance, and process, risk, and control consulting. We help organizations independently assess their financial, operational, and technology risks. You’ll work alongside talented consultants to give clients practical recommendations that reduce risk, strengthen controls, improve operating effectiveness and efficiency, and support their business objectives.

As part of our team, you will:

• Perform IT internal audits and SOX 404 testing for clients, including IT general controls (ITGCs), application controls, and IT-dependent manual controls.
• Assess technology and information security risks across systems, infrastructure, and processes, such as access management, change management, IT operations, cybersecurity, and third-party/vendor risk.
• Support IT consulting engagements, including control design, risk assessments, and framework alignment (e.g., COSO, COBIT, NIST CSF, SOC reporting).
• Review operational and financial processes to give clients an independent assessment of business risks, internal controls, and process effectiveness and efficiency.
• Document processes, controls, and test results in clear, well-organized workpapers, and communicate findings and recommendations to clients and engagement leaders.
• Build strong client relationships by understanding client needs and working productively with business, finance, and IT personnel.
• Stay current on industry standards, emerging technology risks, regulatory developments, and business trends relevant to your clients.
• Use technology and data analytics to improve audit and testing approaches, share what you learn with the team, and enhance service delivery.
• Demonstrate teamwork, integrity, leadership, and initiative, and work with team members to set goals and responsibilities for each engagement.
• Learn SC&H’s service lines, contribute ideas, and identify opportunities where our services can help clients.

Qualified candidates will have:

• Bachelor’s degree in Accounting, Finance, Information Systems, Computer Science, or a related field
• 1–3 years of related experience in IT audit, internal audit, SOX compliance, internal controls, or technology risk consulting
• Working knowledge of ITGCs, SOX 404, and common control frameworks (COSO, COBIT, NIST)
• Familiarity with enterprise systems (e.g., ERP, cloud platforms, databases) and how to assess their controls
• CISA, CPA, CIA, or CISSP (or progress toward one) highly preferred
• Exceptional integrity, values, principles, and work ethic
• The ability to quickly understand and evaluate complex business and technology processes
• Excellent verbal communication and business writing skills, including the ability to explain technical topics to non-technical audiences
• Strong analytical, organizational, and project management skills
• The ability to excel in a team environment and think independently

ABOUT SC&H

SC&H is an employee-owned, global consulting and financial services firm – home to people who believe in the power of trusted personal relationships. Everyone here shares a passion for driving results, fueled by the genuine connections we forge. Our expert capabilities and exceptional service have shaped the firm’s longstanding reputation for excellence and impressive growth. But it’s the partnerships we build and the success we help deliver that make each day rewarding — for our colleagues, our clients, and our communities.

Recognized annually by Inc., Baltimore Business Journal, Accounting Today, and Inside Public Accounting as a “Best Place to Work,” SC&H is routinely named one of the fastest-growing firms for organic growth in the United States. Our success is powered by 13 diverse practices at the intersection of finance, technology, and accounting; 430+ professionals across offices in Maryland, Tysons Corner / Washington D.C., Philadelphia, Chicago, and India; and a client base ranging from emerging growth to world-renowned Fortune 500 companies. This is the place to build lasting professional relationships, grow your skills, and fulfill your potential.

SC&H

Make it Rewarding.

Salary & BenefitsThe expected annual base salary for this position is $70,000-$82,000. Salary offers are made based on a variety of candidate specific factors such as candidate's skills, performance, job responsibilities, prior relevant experience, certain degrees and certifications and market considerations. As a 100% employee-owned firm, SC&H offers the unique benefit of real equity ownership for every colleague with at least 1 year of service. Watch your stake grow as your tenure increases and the firm achieves success. We also offer a comprehensive health plan with multiple options to suit your needs, at least 4 weeks of paid time off, 8 firm-paid holidays, 401k with employer match, and an annual firm trip for you and a guest to an all-inclusive tropical location.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.