IT Finance Audit & Compliance Consultant

Contract to hire position with a financial firm in Northern NJ.
Hybrid-3 days on site

IT Finance Audit & Compliance Consultant

JSR Tech Consulting is seeking a Mid-Level IT Finance Audit & Compliance Consultant to support governance, risk, audit, and compliance initiatives across client environments. The ideal candidate will work closely with IT, Finance, Internal Audit, Security, and business stakeholders to assess controls, support audit activities, and ensure compliance with regulatory and industry frameworks, including SOX
, ISO 27001
, ISO 9001
, and NIST Cybersecurity Framework (CSF).
This role is suited for professionals with 5-8 years of experience in IT audit, compliance, risk management, cybersecurity governance, or financial systems controls.

• Support IT and Finance audit engagements, including internal, external, and regulatory audits.
• Perform testing of IT General Controls (ITGCs) and application controls supporting financial reporting.
• Assist with SOX compliance activities
  , including control documentation, testing, evidence collection, and remediation tracking.
• Conduct compliance assessments against organizational policies and industry standards.
• Prepare audit work papers, compliance reports, and risk assessments.

• Evaluate the effectiveness of IT and business controls.
• Identify compliance gaps, control deficiencies, and risk exposures.
• Support remediation planning and corrective action tracking.
• Participate in vendor and third-party risk assessments.
• Maintain risk and control matrices (RCMs).

• Assist with compliance initiatives aligned to:
  • ISO 27001 Information Security Management Systems (ISMS)
  • ISO 9001 Quality Management Systems (QMS)
  • Sarbanes-Oxley (SOX)
  • NIST Cybersecurity Framework (CSF)
  • NIST SP 800-53 Security Controls
• Review user access management, change management, backup/recovery, and cybersecurity controls.
• Support policy and procedure development and updates.

• Develop and maintain compliance documentation, process flows, and control narratives.
• Track audit findings and remediation status.
• Provide compliance status reporting to management and project stakeholders.
• Support audit readiness and continuous improvement initiatives.

• Bachelor's degree in Information Systems, Accounting, Finance, Cybersecurity, Business, or related field.
• 5+ years of experience in:
  • IT Audit
  • SOX Compliance
  • IT Risk Management
  • Information Security Governance
  • Internal Controls
• Understanding of ITGCs, access controls, change management, and financial systems controls.
• Experience working with auditors and compliance teams.
• Strong analytical, documentation, and communication skills.

• Experience supporting public company SOX programs.
• Knowledge of ERP platforms such as SAP, Oracle, Workday, or Microsoft Dynamics.
• Experience with Governance, Risk, and Compliance (GRC) tools such as:
  • Service Now GRC
  • Audit Board
  • Archer
  • RSA Archer
• Familiarity with cloud environments (Azure, AWS, or Google Cloud).

• CISA (Certified Information Systems Auditor)
• CRISC (Certified in Risk and Information Systems Control)
• CISSP (Certified Information Systems Security Professional)
• CIA (Certified Internal Auditor)
• CPA (Certified Public Accountant)
• ISO 27001 Lead Auditor or Lead Implementer
• Security+ or equivalent cybersecurity certification

• SOX Compliance
• IT General Controls (ITGC)
• Internal & External Audits
• ISO 27001 Compliance
• ISO 9001 Compliance
• NIST Cybersecurity Framework (CSF)
• Risk Assessments
• Governance, Risk & Compliance (GRC)
• Financial Systems Controls
• Control Testing & Documentation
• Audit Readiness
• Stakeholder Communication

Mid-Level (5-8yrs)