Senior Technology Risk and Controls Consultant

• Execute IT audit, IT SOX, and technology risk consulting engagements
• Perform risk assessments, fieldwork, testing, documentation, and reporting
• Evaluate and test ITGCs, ITACs, and other technology controls across systems and environments
• Test system-generated reports and key information used in financial and operational processes
• Assess controls related to system development, change management, access management, IT operations, and technology governance
• Develop and monitor workplans, deadlines, and assigned budgets
• Communicate engagement status, risks, scope changes, and barriers to leadership
• Prepare accurate, well-supported work papers and engagement deliverables
• Identify control gaps, assess risks, and develop practical recommendations
• Communicate testing results, observations, and recommendations to clients and engagement stakeholders
• Build client relationships through responsive communication and quality service delivery
• Support project planning, status tracking, and coordination of engagement activities
• Guide and coach junior team members and review work as appropriate
• Leverage technology-enabled tools and methodologies to improve audit and risk activities
• Lead assigned work streams from planning through reporting
• Serve as a day-to-day client contact
• Participate in proposals, sales pursuits, thought leadership, training, and practice-development activities
• Identify opportunities to provide additional value to clients

• Bachelor's degree in Accounting, Information Systems, Computer Information Systems, Management Information Systems, or a related field
• 3+ years of experience in IT audit, internal audit, IT SOX, technology risk consulting, or a related technology risk and controls role
• Experience evaluating and testing IT General Controls (ITGCs), including user access, change management, and IT operations controls
• Experience evaluating or testing IT Application Controls (ITACs), including automated controls embedded within business processes
• Experience testing the accuracy and completeness of system-generated reports or other key information used in business processes
• Understanding of SDLC, change management, and IT governance processes and related controls
• Ability to identify technology risks and control gaps and document testing procedures, results, and conclusions
• Strong written and verbal communication skills
• Strong analytical, problem-solving, organizational, and project execution skills
• Ability to work independently and as part of a collaborative engagement team
• Willingness and ability to travel based on client and engagement needs
• Professional certification or progress toward certification such as CISA, CPA, CIA, or similar credential preferred
• Knowledge of COSO and COBIT preferred
• Familiarity with internal audit methodologies and key audit deliverables preferred
• Experience with SAP environments or implementations, including SAP ECC, S/4
  
  HANA, RISE with SAP, and SAP GRC preferred
• Experience with continuous controls monitoring, controls automation, data analytics, or technology-enabled audit techniques preferred
• Knowledge of SAP, Oracle Net Suite, Microsoft Dynamics 365, Workday, and enterprise data warehouses preferred
• Experience with cloud and SaaS environments preferred
• Experience performing or supporting IT risk assessments preferred
• Experience providing guidance, coaching, or day-to-day support to junior team members preferred
• Must verify identity and eligibility to work in the United States
• Crowe is not sponsoring work authorization at this time
• Expected to uphold Crowe’s values of Care, Trust, Courage, and Stewardship and act ethically and with integrity

Demonstrates expertise in IT Audit, IT SOX, and technology risk consulting, with a strong focus on evaluating and testing IT General Controls (ITGCs) and IT Application Controls (ITACs). Proficient in risk assessment, project execution, and effective communication with clients and stakeholders.

• IT Audit Experience
• IT SOX Compliance
• Risk Assessment Skills
• IT General Controls (ITGCs)
• Professional Certification (CISA, CPA, CIA)

• IT General Controls (ITGCs)
• IT Application Controls (ITACs)
• Risk Assessment
• System Development Life Cycle (SDLC)
• Change Management
• Technology Governance
• Data Analytics
• Continuous Controls Monitoring
• Controls Automation
• Testing Procedures

• Strong Communication Skills
• Analytical Skills
• Problem-Solving Skills
• Organizational Skills
• Project Execution Skills

• CISA
• CPA
• CIA

• COSO
• COBIT
• Internal Audit Methodologies
• Audit Deliverables
• Technology Risk Consulting

• SAP
• Oracle Net Suite
• Microsoft Dynamics 365
• Workday
• SAP GRC
• Cloud Environments
• SaaS Environments
• Enterprise Data Warehouses