Senior IT Risk Associate – SOX, Internal Audit

Grant Thornton (US)

. Participate in client engagements from start to completion .

Posted 10/6/2026full-timeUnited StatesSenior💰 $101,200 - $129,030 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in IT Internal Control Assessments, IT Risk Management, and compliance with SOX requirements. Proficient in assessing IT controls, including ERP systems and analytics solutions, while delivering exceptional client service and project management.

Highest-signal resume keywords

IT Internal Control AssessmentsIT Risk ManagementCISA CertificationSOX ComplianceERP Systems Assessment

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

IT General ControlsApplication ControlsCybersecurity Risk ManagementControl Design TestingAnalytical MindsetProject ExecutionGRC Solutions AssessmentIdentity and Access ManagementOperating System AssessmentDatabase System Assessment

Soft Skills

Client ServiceCommunicationAnalytical SkillsOrganizational SkillsProject Management

Tools & Technologies

Microsoft VisioMicrosoft Office SuiteACLIDEAQlikViewQlikSenseTableauSpotfireSAPOracle

Certifications & Qualifications

CISACISSPCISMCPA

Industry Keywords

COBITNIST CSFIT Risk Management StandardsFinancial Statement AuditorsInternal Audit Function

Tech Stack

Tools & technologies

Cyber SecurityERPOracleTableau

About the role

Key responsibilities & impact

Participate in client engagements from start to completion
Execute and report on assigned project tasks for co-sourced and outsourced IT internal audit
Perform IT internal control assessments and IT risk management program assessments
Test IT control design and operating effectiveness for SOX and other compliance requirements
Help clients design and implement IT controls
Understand clients’ industry, objectives, strategy, operations, processes, IT systems, and controls
Execute IT control design and operating effectiveness test procedures based on engagement scope and client risk factors
Apply an innovative and analytical mindset to solve business issues and improve project execution
Work with project teams and clients to deliver services according to project leadership and client expectations
Collaborate with colleagues across Advisory Business Lines and Grant Thornton service lines
Meet or exceed defined performance metrics
Perform other duties as assigned

Requirements

What you’ll need

Bachelor’s degree in Accounting, Finance, Information Technology, MIS, or a related field is required
Minimum 2 years of related work experience with a professional services firm or part of an internal audit function
CISA, CISSP, CISM, or CPA license/certification preferred
Understanding of IT risk management and cybersecurity risk management standards, including COBIT and NIST CSF
Experience assessing the design and operating effectiveness of IT risk management and IT controls, including IT general controls and application controls
Experience assessing configuration and controls of ERP systems such as SAP, Oracle, PeopleSoft, or JD Edwards is a plus
Experience assessing configuration and controls of SAP ECC, S/4 HANA, BASIS, security administration, or process controls is a plus
Strong understanding of IT general controls and current focus areas of external financial statement auditors
Experience assessing GRC and Identity and Access Management solutions is a plus
Experience assessing at least one operating system, database system, and IT infrastructure/network component
Experience with ACL, IDEA, QlikView, QlikSense, Tableau, Spotfire, or other analytics and visualization solutions
Ability to execute multiple engagements and complete priorities in a rapidly growing team environment
Strong client service, communication, analytical, organizational, and project management skills
Strong computer skills, including proficiency in Microsoft Visio and Office Suite applications
Ability to travel as needed

Benefits

Comp & perks

Flexible work options, including work location, weekly schedule, and flex time off
Work-life integration options
Personalized and comprehensive benefits
Hybrid work model with flexibility to work at a GT office or client site
Discretionary annual bonus based on individual and firm performance, subject to plan terms and eligibility criteria
Medical, dental, and vision insurance programs
Employee assistance program
Equal employment opportunity and reasonable accommodation support