IT Audit, Cybersecurity & Risk Senior Consultant

In Baker Tilly’s IT Audit, Cybersecurity & Risk practice with a Financial Services focus, this Senior Consultant role supports risk advisory and internal audit and IT control assessment work. You will partner with client executives to identify, assess, and manage technology risks, including cybersecurity, governance, compliance, and business continuity.

Key Responsibilities

• Collaborate with client executives and management teams to understand business operations and help identify and manage financial and operational risks within business systems to support effective technology risk management.
• Build detailed knowledge of client businesses and industries through direct client interaction while contributing across multiple engagement workstreams.
• Apply independent, strategic thinking to evaluate client business needs, systems, and risks, and develop recommendations for business and process improvements aligned to client operations and objectives.
• Support implementation of new processes and controls by providing strategic business advice focused on addressing key risks.
• Assess, manage, and optimize information technology risk across areas including cybersecurity, IT strategy and governance, IT regulatory and compliance requirements, and business continuity.
• Evaluate client processes and controls against industry frameworks to identify design and execution gaps, and communicate findings with actionable recommendations.
• Assist with development of audit programs and execution of internal audits and IT control assessments across IT strategy and governance, IT operations, business continuity and disaster recovery, cybersecurity, third-party risk, ITGC and application controls, SOC reporting, and regulatory and compliance requirements.
• Contribute to drafting executive summaries and final reports, and document and review engagement work papers in accordance with industry-accepted internal audit methodologies.
• Serve as a valued business advisor by building client relationships and communicating effectively to support strong client service.
• Continue expanding experience across technology environments, platforms, applications, and supporting tools and utilities.

Qualifications

• 4 year degree.
• Three (3) years of experience.

Preferred Qualifications

• Bachelor’s degree in management/computer information systems, computer science, accounting information systems, computer engineering, industrial engineering, or a related program.
• CISA, CISSP, CISM, CIA, or CPA certification(s) preferred.
• 3+ years of experience with IT audit or cybersecurity; previous experience performing IT SOX and IT FDICIA audits preferred.
• Flexibility to travel to various client sites, including overnight travel as needed up to 30%.
• Experience as a client-serving professional for a consulting firm preferred.
• Experience with financial services preferred.
• Excellent analytical, technical, and problem-solving skills with strong attention to detail.
• Ability to go onsite to the client 3 days a week as needed.
• Exceptional verbal and written communication, collaboration, and time management skills.

Additional Role Focus

• Participate in external and internal education, training, and cross-training opportunities to grow skills and support organizational and career development goals.
• Use entrepreneurial skills to network and build relationships internally and externally with clients.
• Work within a team environment that supports work-life balance through social activities and team outings.

Compensation and Location

Location: New York, NY (hybrid).

Base pay range: USD 78,100 - 126,500 per yearly.

Pay rate range note: Actual compensation is influenced by factors including applicant skills, prior experience, qualifications, degrees, professional certifications, work arrangements, and geographic location.

Benefits and Work Location Status

• Baker Tilly offers a comprehensive compensation and benefits package to eligible employees.
• Work location tags: #LI-LF2, #LI-hybrid.

What You Will Do

• Work closely with client executives and management teams to understand their businesses and help identify and manage financial and operational risks within business systems to ensure technology risks are managed.
• Develop in-depth knowledge of client businesses and industries through direct client interaction while supporting multiple aspects of an engagement.
• Think independently and strategically about clients’ business, systems, and risks to provide recommendations for improvements based on client operations and objectives.
• Provide strategic business advice by supporting implementation of new processes and controls that address key risks.
• Assess, manage, and optimize IT risk across cybersecurity, IT strategy and governance, IT regulatory and compliance requirements, and business continuity.
• Review client processes and controls against industry frameworks, identify gaps, and communicate issues and recommendations.
• Assist in audit program development and execution of internal audits and IT control assessments across IT governance, IT operations, business continuity and disaster recovery, cybersecurity, third-party risk, ITGC and application controls, SOC reporting, and regulatory and compliance requirements.
• Draft executive summaries and final reports, and document and review engagement work papers in line with industry-accepted internal audit methodologies.
• Build strong client relationships and communicate effectively to provide superior client service.
• Continue developing knowledge and experience across a range of technology environments, platforms, applications, and tools.