IT Audit, Cybersecurity & Risk Advisory Senior Consultant (PCI Focus)

This Senior Consultant position supports Baker Tilly’s Risk Advisory practice through IT audit, cybersecurity, and PCI DSS compliance work. The role is onsite in Lehi, UT and focuses primarily on PCI assessments and related advisory and internal audit engagements, including delivery of compliance reporting and client recommendations.

Core Responsibilities

• Partner with client executives and management teams to understand business operations and assist in identifying, managing, and mitigating security and PCI DSS compliance risks across business systems.
• Lead PCI DSS compliance assessments by evaluating client environments against applicable PCI DSS requirements, documenting results through Reports on Compliance (ROCs) and/or Self-Assessment Questionnaires (SAQs), and supporting associated Attestations of Compliance (AOCs).
• Participate in cybersecurity, technology risk, and other advisory or consulting engagements as client and business needs evolve.
• Use independent and strategic thinking to form practical recommendations for business and process improvements based on client operations, processes, and objectives.
• Support strategic business assurance by assisting with implementation of new processes and controls designed to address key risks.
• Assess, manage, and optimize information technology risk across areas including cybersecurity, IT strategy and governance, IT regulatory and compliance requirements, and business continuity.
• Review client processes and controls against industry frameworks to identify gaps in design and execution and communicate issues and recommendations.
• Contribute to development of audit programs and execution of internal audits and IT control assessments, including topics such as IT strategy and governance, IT operations, business continuity and disaster recovery, cybersecurity, third-party risk, ITGC and application controls, SOC reporting, PCI DSS compliance, and regulatory and compliance requirements.
• Draft executive summaries and final reports for client delivery, and document and review engagement work papers using industry-accepted internal audit methodologies.
• Provide client-focused advisory services by building relationships and communicating effectively to deliver strong service outcomes.
• Deliver professional presentations to internal and external audiences.
• Continue developing knowledge across technology environments, platforms, applications, and tools.
• Grow skills through external and internal education, training, and cross-training opportunities.
• Use relationship-building and networking skills to establish and strengthen internal and external client connections.
• Support team member growth through the Baker Tilly Care and Teach philosophy to help associates meet professional goals.
• Participate in team activities that support work-life balance, including social events and outings.

Requirements

• Education: 4-year degree
• Experience: 3 years

Preferred Qualifications

• Bachelor’s degree in management/computer information systems, computer science, accounting information systems, computer engineering, industrial engineering, or a related program
• 3+ years of experience with IT audit or cybersecurity
• CISA, CISSP, CISM, or CPA certifications preferred
• Experience as a PCI QSA serving professional preferred
• Experience as a client serving professional for a consulting firm desired
• Cloud audit experience and certifications preferred
• Excellent analytical, technical, and problem-solving skills with strong attention to detail
• Exceptional verbal and written communication, collaboration, and time management skills

Compensation and Benefits

Salary: USD 85,910 - 162,890 per year.

Baker Tilly offers a comprehensive compensation and benefits package to eligible employees.

Location and Work Setting

Location: Lehi, UT (onsite)