• Reviewing IT controls testing, process narratives, flow charts or procedures for other types of assessments
• Approving engagement scope, project plans, risk assessments, testing approach and specific procedures
• Identifying areas for improvement and value-add
• Preparing reports or other appropriately styled presentations of findings and recommendations
• Preparation for, and participation in Audit Committee meetings or other senior management meetings
• Developing and managing relationships with client management
• Managing engagement economics; and
• Business development with new and existing clients.

• Certified ACA, ACCA, CISA, CISM or other standard auditing or information security certifications combined with solid IT audit experience
• Five + years of experience in audit and advisory roles performing IT audit, systems implementations, or Information Security
• Excellent interpersonal, written and oral communication skills, and ability to assimilate easily into teams
• Strong technical skills and a working knowledge of SOX IT General Controls, COSO, SOC 1, and SOC 2
• Awareness of ISO 27001, GDPR, and other relevant standards
• Effective analytical and critical thinking abilities
• Entrepreneurial nature, self-motivated, ethical, and dependable

IT Risk Manager
 
Manager-level IT consultants work closely with senior management of FTSE 100/250, mid-cap, and start-up companies, as well as all levels of CFGI staff from Consultant to Partner. Engagements include IT Internal Audit, SOX (Sarbanes-Oxley) compliance and testing, attestation/certification readiness work, business process improvement projects, compliance and other assessments.
 
CFGI Managers lead project teams and interact with clients and their external auditors (or other professional service firms) on all aspects of engagements, including:
Reviewing IT controls testing, process narratives, flow charts or procedures for other types of assessments
Approving engagement scope, project plans, risk assessments, testing approach and specific procedures
Identifying areas for improvement and value-add
Preparing reports or other appropriately styled presentations of findings and recommendations
Preparation for, and participation in Audit Committee meetings or other senior management meetings
Developing and managing relationships with client management
Managing engagement economics; and
Business development with new and existing clients.
 
Furthermore, Managers have internal responsibilities for staff development, training, internal projects, and the continual improvement of the Risk Advisory team.
 
Ideal candidates will possess the following:
 
Certified ACA, ACCA, CISA, CISM or other standard auditing or information security certifications combined with solid IT audit experience
Five + years of experience in audit and advisory roles performing IT audit, systems implementations, or Information Security
Excellent interpersonal, written and oral communication skills, and ability to assimilate easily into teams
Strong technical skills and a working knowledge of SOX IT General Controls, COSO, SOC 1, and SOC 2
Awareness of ISO 27001, GDPR, and other relevant standards
Effective analytical and critical thinking abilities
Entrepreneurial nature, self-motivated, ethical, and dependable