IT Risk Advisory – Manager

🔥 1 hour ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🎲 Risk

👻 Ghost score 19%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

CFGI

WebsiteLinkedInAll Job Openings

501 - 1000 employees

💼 Consulting

🏥 Healthcare

🏭 Manufacturing

Consulting • Healthcare • Manufacturing

CFGI is a leading independent accounting advisory firm that supports CFOs around the globe in critical financial and accounting functions. The firm provides a comprehensive suite of solutions including technical and operational accounting, capital markets advisory, strategic finance, analytics, ESG and sustainability reporting, operational and technology transformation, risk and compliance, cybersecurity, forensic accounting, tax and valuation services, transaction advisory, and workforce transformation. CFGI serves a diverse range of industries such as business services, financial services, healthcare, and life sciences, helping companies navigate complex financial landscapes and drive business growth.

📋 Description

• Lead IT internal audit, IT SOX compliance, and technology risk advisory engagements across various industries • Manage IT General Controls (ITGCs), SOX compliance, SOC reporting, IT risk assessments, cybersecurity governance, and technology compliance engagements • Review IT process documentation, including process narratives, flowcharts, risk and control matrices, testing documentation, and audit workpapers • Lead engagement planning, including project scopes, risk assessments, testing strategies, project plans, and audit procedures • Identify opportunities to strengthen IT governance, internal controls, cybersecurity, and operational effectiveness • Develop practical recommendations for clients • Develop and present client-ready reports, executive presentations, and Audit Committee materials • Manage project workstreams, engagement economics, timelines, budgets, and client deliverables • Mentor Consultants through technical guidance, coaching, and performance feedback • Participate in proposal development, client relationship management, recruiting, and business development initiatives • Collaborate with senior client stakeholders and serve as a trusted advisor

🎯 Requirements

• 5-9 years of experience in IT audit, IT risk advisory, information security, systems implementation, public accounting, consulting, and/or corporate IT risk • Experience leading IT internal audit, IT SOX compliance, IT General Controls (ITGCs), information security, SOC reporting, or technology risk engagements • Experience applying IT governance and control frameworks, including SOX ITGCs, COSO, SOC 1, and/or SOC 2 • Experience leading IT internal audit, SOX compliance, technology risk, cybersecurity governance, or compliance assessments • Experience developing and reviewing IT process documentation, including process narratives, flowcharts, risk and control matrices, audit workpapers, and testing documentation • Experience performing or leading IT control design assessments, walkthroughs, testing procedures, remediation activities, and technology control improvement initiatives • Experience applying cybersecurity and IT governance frameworks such as ISO 27001, NIST Cybersecurity Framework (CSF), COBIT, HIPAA, FAIR, PCI DSS, or similar regulatory and compliance standards • Experience leading project teams, managing engagement economics, mentoring junior professionals, and serving as a primary point of contact for client stakeholders • Experience contributing to proposal development, business development, or practice initiatives • CISA, CIA, CISSP, CPA, Security+, or other relevant professional certification is nice to have • Bachelor’s degree in a relevant field is nice to have • MBA or other relevant graduate degree is nice to have • Experience supporting ERP implementations, cloud environments, identity and access management (IAM), governance, risk and compliance (GRC) technologies, or technology transformation initiatives is nice to have • Excellent interpersonal, written, and verbal communication skills • Ability to build relationships across client and engagement teams • Ability to manage multiple workstreams and competing priorities • Strong analytical and structured problem-solving abilities • Entrepreneurial, self-motivated, adaptable, ethical, and dependable