Consultant

Key Responsibilities:

System Evaluation and IT Audits:

• Perform system evaluations and/or audits of IT and business processes in alignment with firm IT standards.
• Assess the effectiveness of IT controls in accordance with internal IT Standards and well-known IT audit frameworks such as ISO 27001, PCI DSS, SOC2, etc.
• Identify and document deficiencies in IT controls and provide actionable recommendations for remediation.

Client Collaboration and Communication:

• Work directly with clients to develop corrective action plans for identified deficiencies.
• Validate the remediation of deficiencies to ensure compliance with IT standards.
• Communicate IT control risks and issues to technical and non-technical stakeholders.

Documentation and Reporting:

• Create detailed audit reports, including findings, risk levels, and remediation recommendations.
• Maintain documentation of audit processes and methodologies.
• Track and report on the status of identified deficiencies and remediation efforts.

Skills:

• Strong understanding of IT audit frameworks such as ISO 27001, PCI DSS, SOC2, etc.
• Proficiency in assessing IT controls and compliance.
• Excellent problem-solving skills and attention to detail.
• Strong communication and interpersonal skills, with the ability to work effectively with clients and cross-functional teams.