Technology Consulting-DT IT Audit Senior

We are seeking a highly skilled Senior IT Audit Consultant to join our Technology Consulting team. As a Senior Consultant specializing in IT Audit , you will work with clients to assess, evaluate, and enhance their IT systems, processes, and controls, ensuring that they are compliant with regulatory standards and industry best practices. This is a critical role where you will help organizations identify potential IT risks, enhance their internal control environments, and ensure that their IT systems are secure, efficient, and compliant with applicable laws and regulations. You will play an essential role in driving client value through comprehensive audits, insightful recommendations, and practical improvements in their IT governance and security frameworks.

Key Responsibilities:

• IT Audit Planning & Execution: Lead and execute IT audits for clients across various industries, focusing on areas such as IT governance, cybersecurity, data privacy, system implementations, and regulatory compliance. Conduct audits in line with internal methodologies, industry standards, and regulatory requirements.

• Risk Assessment & Control Evaluation: Identify and assess IT risks and evaluate the effectiveness of internal controls related to IT infrastructure, processes, and applications. Perform detailed risk assessments, including evaluating information security measures, data protection practices, and system access controls.

• Compliance & Regulatory Reviews: Ensure client systems comply with relevant regulations, such as SOX , GDPR , HIPAA , ISO 27001 , PCI DSS , and NIST . Review policies and practices to ensure alignment with these standards and recommend improvements where necessary.

• Audit Reporting & Documentation: Prepare detailed audit reports that provide clear, actionable findings and recommendations. Present audit results to senior management and clients in an understandable manner, highlighting risks and recommending strategies for remediation or improvement.

• Security & Cyber Risk Advisory: Evaluate the effectiveness of cybersecurity policies and protocols, assess vulnerability management practices, and provide recommendations for strengthening IT security frameworks. Assist clients in addressing cyber threats and risks by evaluating their IT infrastructure and identifying weaknesses.

• Internal Control Optimization: Advise clients on enhancing their internal controls related to IT processes, access management, data integrity, and systems security. Develop and implement strategies to strengthen governance, risk, and compliance frameworks across their IT environments.

• Continuous Improvement & Best Practices: Stay current with emerging trends, technologies, and regulatory changes in IT audit, cybersecurity, and governance. Continuously apply new knowledge to improve auditing methods, tools, and client advisory services.

• Client Communication & Relationship Management: Maintain strong client relationships by understanding their business needs and delivering practical, risk-based insights. Collaborate with client IT, audit, and compliance teams to provide expert advice and ensure actionable outcomes from audit engagements.

• Mentoring & Knowledge Transfer: Mentor and guide junior team members in their development and growth, ensuring knowledge transfer and alignment with the firm’s audit methodology and standards. Provide training on audit best practices and emerging trends in IT audit and cybersecurity.

Qualifications:

• Bachelor’s or Master’s degree in Information Technology, Computer Science, Accounting, Business Administration, or a related field.
• 5+ years of experience in IT audit, internal audit, or cybersecurity roles, preferably with a background in consulting or professional services.
• Deep knowledge of IT governance frameworks (e.g., COBIT, ITIL) and familiarity with audit methodologies such as ISACA’s COBIT , NIST , ISO 27001 , and SOC 2 .
• Expertise in evaluating IT controls , security protocols , data privacy , and business continuity planning .
• Experience in risk management , including identifying, evaluating, and addressing IT risks within complex organizational environments.
• Familiarity with regulatory requirements such as SOX , GDPR , PCI DSS , and HIPAA .
• Strong technical background with the ability to understand complex IT environments and assess IT controls across infrastructure, applications, and data systems.
• Proficiency in using audit tools and methodologies, including automated audit software and analytics tools, to enhance audit efficiency.
• Excellent communication skills , with the ability to prepare clear audit reports and effectively communicate technical findings to non-technical stakeholders.
• Detail-oriented with a strong analytical mindset and ability to identify gaps and provide actionable recommendations for improvement.
• Project management skills , with the ability to manage multiple client engagements, deadlines, and deliverables.

Preferred Skills:

• Certifications such as Certified Information Systems Auditor (CISA) , Certified Information Security Manager (CISM) , Certified in Risk and Information Systems Control (CRISC) , or Certified Information Privacy Professional (CIPP) .
• Experience with IT auditing for cloud computing environments , including evaluating cloud security configurations and cloud-based applications.
• Experience in evaluating IT infrastructure , network security , and cybersecurity practices and working knowledge of security frameworks like NIST Cybersecurity Framework .
• Familiarity with tools like Splunk , Archer , TeamMate , or other audit management software.
• Knowledge of data analytics and using data analytics to enhance audit quality and insights.

Soft Skills:

• Strong leadership and mentoring skills , with the ability to manage client relationships and lead audit teams.
• Excellent client-facing skills , with the ability to present complex technical findings to senior stakeholders in an understandable and actionable format.
• Proactive attitude , with the ability to identify issues before they become problems and work effectively to resolve them.
• Collaborative mindset , with the ability to work with cross-functional teams across client organizations to achieve audit goals.
• Analytical and problem-solving skills , with the ability to develop and implement practical solutions for complex IT risks and control issues.