IT Risk Advisory – Manager

CFGI

. Lead IT internal audit, IT SOX compliance, and technology risk advisory engagements across various industries .

Posted 10/16/2026full-timeRemote • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in IT Internal Audit, IT SOX Compliance, and Technology Risk Advisory, with a strong focus on IT General Controls (ITGCs) and cybersecurity governance. Proven ability to lead engagements, manage project workstreams, and develop client-ready reports while mentoring junior professionals.

Highest-signal resume keywords

IT Internal AuditIT SOX ComplianceIT General Controls (ITGCs)Cybersecurity GovernanceCISA

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

IT Risk AdvisorySOC ReportingRisk AssessmentsProcess DocumentationControl FrameworksControl Design AssessmentsTesting ProceduresTechnology Control ImprovementCybersecurity FrameworksERP Implementations

Soft Skills

Interpersonal SkillsWritten CommunicationVerbal CommunicationAnalytical SkillsProblem-Solving

Tools & Technologies

Governance, Risk and Compliance (GRC) TechnologiesCloud EnvironmentsIdentity and Access Management (IAM)

Certifications & Qualifications

CISACIACISSPCPASecurity+

Industry Keywords

SOX ITGCsCOSOSOC 1SOC 2ISO 27001NIST Cybersecurity FrameworkCOBITHIPAAFAIRPCI DSS

Tech Stack

Tools & technologies

CloudCyber SecurityERP

About the role

Key responsibilities & impact

Lead IT internal audit, IT SOX compliance, and technology risk advisory engagements across various industries
Manage IT General Controls (ITGCs), SOX compliance, SOC reporting, IT risk assessments, cybersecurity governance, and technology compliance engagements
Review IT process documentation, including process narratives, flowcharts, risk and control matrices, testing documentation, and audit workpapers
Lead engagement planning, including project scopes, risk assessments, testing strategies, project plans, and audit procedures
Identify opportunities to strengthen IT governance, internal controls, cybersecurity, and operational effectiveness
Develop practical recommendations for clients
Develop and present client-ready reports, executive presentations, and Audit Committee materials
Manage project workstreams, engagement economics, timelines, budgets, and client deliverables
Mentor Consultants through technical guidance, coaching, and performance feedback
Participate in proposal development, client relationship management, recruiting, and business development initiatives
Collaborate with senior client stakeholders and serve as a trusted advisor

Requirements

What you’ll need

5-9 years of experience in IT audit, IT risk advisory, information security, systems implementation, public accounting, consulting, and/or corporate IT risk
Experience leading IT internal audit, IT SOX compliance, IT General Controls (ITGCs), information security, SOC reporting, or technology risk engagements
Experience applying IT governance and control frameworks, including SOX ITGCs, COSO, SOC 1, and/or SOC 2
Experience leading IT internal audit, SOX compliance, technology risk, cybersecurity governance, or compliance assessments
Experience developing and reviewing IT process documentation, including process narratives, flowcharts, risk and control matrices, audit workpapers, and testing documentation
Experience performing or leading IT control design assessments, walkthroughs, testing procedures, remediation activities, and technology control improvement initiatives
Experience applying cybersecurity and IT governance frameworks such as ISO 27001, NIST Cybersecurity Framework (CSF), COBIT, HIPAA, FAIR, PCI DSS, or similar regulatory and compliance standards
Experience leading project teams, managing engagement economics, mentoring junior professionals, and serving as a primary point of contact for client stakeholders
Experience contributing to proposal development, business development, or practice initiatives
CISA, CIA, CISSP, CPA, Security+, or other relevant professional certification is nice to have
Bachelor’s degree in a relevant field is nice to have
MBA or other relevant graduate degree is nice to have
Experience supporting ERP implementations, cloud environments, identity and access management (IAM), governance, risk and compliance (GRC) technologies, or technology transformation initiatives is nice to have
Excellent interpersonal, written, and verbal communication skills
Ability to build relationships across client and engagement teams
Ability to manage multiple workstreams and competing priorities
Strong analytical and structured problem-solving abilities
Entrepreneurial, self-motivated, adaptable, ethical, and dependable