Staff Consultant - Risk; IT

SC&H Group is searching for a talented, motivated professional to join our Risk Consulting Practice as a Staff Consultant focused on IT audit. You’ll apply your IT audit, internal control, and technology risk experience while building your business, technical, and project management skills in a challenging, rewarding environment.

SC&H’s Risk Consulting Practice delivers internal audit, IT audit, Sarbanes-Oxley (SOX) 404 compliance, and process, risk, and control consulting. We help organizations independently assess their financial, operational, and technology risks. You’ll work alongside talented consultants to give clients practical recommendations that reduce risk, strengthen controls, improve operating effectiveness and efficiency, and support their business objectives.

• Perform IT internal audits and SOX 404 testing for clients, including IT general controls (ITGCs), application controls, and IT-dependent manual controls.
• Assess technology and information security risks across systems, infrastructure, and processes, such as access management, change management, IT operations, cybersecurity, and third-party/vendor risk.
• Support IT consulting engagements, including control design, risk assessments, and framework alignment (e.g., COSO, COBIT, NIST CSF, SOC reporting).
• Review operational and financial processes to give clients an independent assessment of business risks, internal controls, and process effectiveness and efficiency.
• Document processes, controls, and test results in clear, well-organized work papers, and communicate findings and recommendations to clients and engagement leaders.
• Build strong client relationships by understanding client needs and working productively with business, finance, and IT personnel.
• Stay current on industry standards, emerging technology risks, regulatory developments, and business trends relevant to your clients.
• Use technology and data analytics to improve audit and testing approaches, share what you learn with the team, and enhance service delivery.
• Demonstrate teamwork, integrity, leadership, and initiative, and work with team members to set goals and responsibilities for each engagement.
• Learn SC&H’s service lines, contribute ideas, and identify opportunities where our services can help clients.

• Bachelor’s degree in Accounting, Finance, Information Systems, Computer Science, or a related field
• 1–3 years of related experience in IT audit, internal audit, SOX compliance, internal controls, or technology risk consulting
• Working knowledge of ITGCs, SOX 404, and common control frameworks (COSO, COBIT, NIST)
• Familiarity with enterprise systems (e.g., ERP, cloud platforms, databases) and how to assess their controls
• CISA, CPA, CIA, or CISSP (or progress toward one) highly preferred
• Exceptional integrity, values, principles, and work ethic
• The ability to quickly understand and evaluate complex business and technology processes
• Excellent verbal communication and business writing skills, including the ability to explain technical topics to non-technical audiences
• Strong analytical, organizational, and project management skills
• The ability to excel in a team environment and think independently

SC&H is an employee-owned, global consulting and financial services firm – home to people who believe in the power of trusted personal relationships. Everyone here shares a passion for driving results, fueled by the genuine connections we forge. Our expert capabilities and exceptional service have shaped the firm’s longstanding reputation for excellence and impressive growth. But it’s the partnerships we build and the success we help deliver that make each day rewarding — for our colleagues, our clients, and our…