IT Audit Consultant - ITGC - Financial Services

Overview

A consulting role for an experienced IT Audit Consultant supporting a large financial services organization with technology risk, controls, and audit initiatives. The assignment focuses on evaluating technology controls through IT General Controls (ITGC) design and operating effectiveness testing, identifying control gaps, documenting findings, and supporting remediation efforts.

Responsibilities

• Perform IT audit and ITGC testing across applications, infrastructure, databases, and supporting technology environments.
• Evaluate the design and operating effectiveness of IT controls, including:
  • User access and identity/access management
  • Privileged access
  • User provisioning and de-provisioning
  • Segregation of duties
  • Change management
  • System development lifecycle (SDLC)
  • Computer operations
  • Backup, recovery, and business continuity-related controls
• Conduct control walkthroughs, develop testing procedures, review supporting evidence, and document testing results.
• Identify control deficiencies, technology risks, and process gaps; communicate findings clearly to stakeholders.
• Assist with development of audit workpapers, risk assessments, testing documentation, and audit reports.
• Partner with control owners and technology teams to understand root causes and support remediation and validation activities.
• Assess IT controls supporting financially significant applications and business processes.
• Collaborate with Internal Audit, Technology Risk, Information Security, Compliance, Finance, and business teams throughout the engagement.
• Support audits and assessments involving regulatory requirements and industry control frameworks.
• Manage assigned audit activities and deliverables against established project timelines.

Requirements

• 5+ years of IT Audit, IT Risk, Technology Controls, or similar experience, with significant hands-on ITGC experience.
• Previous experience within the banking or financial services industry.
• Strong understanding of ITGC domains, particularly access management, change management, SDLC, and IT operations.
• Experience performing control walkthroughs, control testing, evidence review, deficiency identification, and audit documentation.
• Knowledge of SOX ITGC environments and risk-based audit methodologies.
• Ability to evaluate complex technology processes and translate technical risks into clear business and control implications.
• Strong written and verbal communication skills; ability to interact effectively with technology teams, control owners, auditors, and senior stakeholders.
• Ability to work independently in a fast-paced, highly regulated environment.

Preferred Qualifications

• Experience auditing large, complex banking technology environments.
• Familiarity with regulatory expectations applicable to large financial institutions.
• Experience with cybersecurity controls, information security, cloud environments, third-party technology risk, automated controls, and application controls.
• Familiarity with frameworks and standards such as COBIT, NIST, ISO 27001, COSO, and SOX.
• Experience using audit/GRC platforms such as Archer, ServiceNow GRC, or AuditBoard.
• Professional certifications such as CISA, CIA, CISSP, CRISC, or CPA (preferred but not required).

Compensation & Benefits

• Compensation commensurate with qualifications, experience, and other factors including geographic location, market and operational factors.
• Total Rewards include:
  • Medical
  • Dental
  • Vision
  • Life Insurance
  • Disability Insurance
  • 401(k) Savings Plan
  • Employee Stock Purchase Plan
  • Professional Development Program
  • Paid Time Off
  • Paid Sick Time (in geographies where legally required)

Location and Work Details

• Fully Remote
• Full-time
• Pittsburgh, United States

Equal Opportunity

The employer is an Equal Opportunity Employer committed to creating an inclusive environment and does not discriminate on the basis of race, color, religion, national origin, gender, pregnancy, sexual orientation, gender identity, age, physical or mental disability, genetic information, veteran status, or any other legally protected trait.