Lead Consultant - Business Consulting Services (IT Audit)

Job Description

Assists in the application of accounting, financial, economic and data analysis expertise to address clients’ critical issues.

Primary Duties And Responsibilities

Engagement Management

Participate and lead in engagement team planning meeting, and prepare minutes of the meeting as applicable

Prepare and sign off working papers that document observations and evidence gathered in the course of performing engagement procedures

Check the accuracy of engagement schedules and other documents prepared by client personnel

Ensure all procedures in the work programs are completely and appropriately performed and documented

File evidence relevant to the engagement in an engagement binder

Complete all workpapers (related Audit Methodology or Tool files and engagement binders) before the release of the report

Submit supporting workpapers (related voyager files and engagement binders) during the review process

Relationship Management

Establish and maintain clear coordination and good working relationship with client personnel, superiors, teammates, and other associates within and outside the firm at all times.

Maintain a “can-do” and positive attitude at all times in accepting assignments and working with other P&A personnel

Technical Background

Plan and execute audits on all IT platforms including development of objectives, scope, and procedures for the manager and/or director review.

Experience in application security and controls and network and infrastructure security risk assessment.

Familiar with OWASP top 10 application security best practices.

Knowledge of common and emerging security threats.

Can perform threat modelling and risk-based security assessment and can articulate vulnerabilities into business risk and recommend the appropriate solution.

Good communication skills to effectively articulate and explain complex security topics.

Perform pre-implementation or post-implementation reviews of the major computer-based systems.

Analyze technical problems and arrive at workable solutions. Evaluate complex information, identify key issues that need to be addressed, and develop a course of action that effectively addresses the issue at hand

Provide training and supervision to staff by providing direct and actionable feedback on their work to help develop skills.

Vulnerability assessment and penetration testing background is preferred.

Conduct information technology and compliance / regulatory audit and evaluate IT general and application controls.

Qualifications

Bachelor’s degree in Accounting, Business, Economics, Finance, Information Systems, Engineering or other related fields (although work experience is more important)

Certified Public Accountant (CPA) or Certified Information Systems Auditor (CISA) is an advantage

At least three years of relevant work experience in Business Risk and Consulting Services (Internal Audit, Governance and Risk Management, Operational Improvement, Change and Program Management, IT Management, and Business Intelligence, and Analytics)

Strong quantitative and analytical reasoning.