IT Risk Senior Associate – SOX, Internal Audit

Grant Thornton (US)

. Participate in client engagements from start to completion .

Posted 10/9/2026full-timeUnited StatesSenior💰 $101,200 - $129,030 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in IT Internal Control Assessments, IT Risk Management, and compliance with SOX requirements. Proficient in executing multiple engagements while delivering exceptional client service and utilizing analytics tools for effective project execution.

Highest-signal resume keywords

IT Risk ManagementSOX ComplianceCISA CertificationIT General ControlsAnalytics Solutions

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

IT Internal Control AssessmentsIT Risk ManagementSOX ComplianceIT General ControlsApplication ControlsERP Systems AssessmentCybersecurity Risk ManagementOperating System AssessmentDatabase System AssessmentIT Infrastructure Assessment

Soft Skills

Client ServiceCommunicationAnalytical SkillsOrganizational SkillsProject Management

Tools & Technologies

ACLIDEAQlikViewQlikSenseTableauSpotfireMicrosoft VisioMicrosoft Office Suite

Certifications & Qualifications

CISACISSPCISMCPA

Industry Keywords

COBITNIST CSFGRCIdentity and Access ManagementSAPOraclePeopleSoftJD EdwardsSAP ECCS/4 HANA

Tech Stack

Tools & technologies

Cyber SecurityERPOracleTableau

About the role

Key responsibilities & impact

Participate in client engagements from start to completion
Execute and report on assigned project tasks for co-sourced and outsourced IT internal audit
Perform IT internal control assessments and IT risk management program assessments
Test IT control design and operating effectiveness for SOX and other compliance requirements
Help clients design and implement IT controls
Understand clients’ industries, objectives, strategies, operations, processes, IT systems, and controls
Apply engagement scope and client risk factors to IT control testing
Help clients solve business issues and enable efficient project execution
Work with project teams and clients to deliver services according to expectations
Collaborate with colleagues across Advisory Business Lines, Audit Services, and Tax Services
Meet or exceed defined performance metrics
Perform other duties as assigned

Requirements

What you’ll need

Bachelor’s degree in Accounting, Finance, Information Technology, MIS, or a related field is required
Minimum 2 years of related work experience with a professional services firm or internal audit function
Understanding of IT risk management and cybersecurity risk management standards, including COBIT and NIST CSF
Experience assessing the design and operating effectiveness of IT risk management and IT controls, including IT general controls and application controls
Strong understanding of IT general controls and current focus areas of external financial statement auditors
Experience assessing at least one operating system, database system, and IT infrastructure/network component
Experience with ACL, IDEA, QlikView, QlikSense, Tableau, Spotfire, or other analytics and visualization solutions
Ability to execute multiple engagements and complete priorities in a rapidly growing team environment
Exceptional client service, communication, analytical, organizational, and project management skills
Strong computer skills, including proficiency in Microsoft Visio and Office Suite applications
Ability to travel as needed
CISA, CISSP, CISM, or CPA license/certification preferred
Experience assessing ERP systems such as SAP, Oracle, PeopleSoft, or JD Edwards is a plus
Experience assessing SAP ECC, S/4 HANA, BASIS, security administration, and process controls is a plus
Experience assessing GRC and Identity and Access Management solutions is a plus

Benefits

Comp & perks

Flexible work location, weekly schedule, and flex time off options
Hybrid work model
Work-life integration options
Personalized and comprehensive benefits
Discretionary annual bonus based on individual and firm performance, subject to plan terms and eligibility
Medical, dental, and vision insurance programs
Employee assistance program
401(k) savings plan and employee retirement plan, where eligible
Paid sick leave
Firm holidays paid for eligible interns