Strategic IT Risk & Controls Specialist

Grant Thornton (US); San Jose (CA); On-site; USD 101,000 - 129,000; Full time

Job summary

Grant Thornton LLP is seeking an IT Risk Senior Associate to help clients understand and address IT risks. You’ll participate in IT internal audits, control assessments, and risk management engagements, designing and testing controls with a collaborative advisory team.

The role requires a Bachelor's degree in a related field and at least 2 years of experience in a professional services or internal audit setting, with preferred certifications (CISA/CISSP/CISM/CPA). Travel may be required.

Qualifications

• Bachelor’s degree in Accounting, Finance, Information Technology, MIS, or a related field is required.
• Minimum 2 years of related work experience with a professional services firm, or part of an internal audit function.
• CISA, CISSP, CISM, CPA license/certification preferred.
• Understanding of IT risk management and cybersecurity risk management standards (COBIT, NIST CSF, etc.).
• Experience in assessing the design and operating effectiveness of IT risk management and IT controls.

Responsibilities

• Actively participate in client engagements from start to completion, focusing on IT internal audit, internal control assessments, and IT risk management programs.
• Perform tests of IT control design and operating effectiveness for SOX and other compliance requirements.
• Understand clients’ industry, objectives, and IT controls; assess ERP configurations (SAP, Oracle, etc.).
• Collaborate with teams across Advisory and other service lines; deliver services per project scope and client expectations.

Skills

IT risk management

Internal controls

SOX compliance

GRC

IAM

OS/Windows/UNIX

Tableau

QlikView

QlikSense

Analytics

Client service

Education

Bachelor's degree in Accounting, Finance, Information Technology, MIS, or related field

Tools

SAP

Oracle

PeopleSoft

JD Edwards

Job description

Grant Thornton LLP is seeking an IT Risk Senior Associate to help clients understand and address IT risks. You’ll participate in IT internal audits, control assessments, and risk management engagements, designing and testing controls with a collaborative advisory team.

The role requires a Bachelor's degree in a related field and at least 2 years of experience in a professional services or internal audit setting, with preferred certifications (CISA/CISSP/CISM/CPA). Travel may be required.