IT Audit Consultant - ITGC - Financial Services

We are seeking an experienced IT Audit Consultant to support a large financial services organization with technology risk, controls, and audit initiatives. The consultant will leverage strong IT General Controls (ITGC) experience to assess the design and operating effectiveness of technology controls, identify control gaps, document findings, and support remediation efforts.

The ideal candidate will bring prior experience working within a banking or financial services environment, with a solid understanding of technology risks, regulatory expectations, internal controls, and audit methodologies. This individual should be comfortable working independently, partnering with technology and business stakeholders, and communicating audit findings to management.

Key Responsibilities

• Perform IT audit and ITGC testing across applications, infrastructure, databases, and supporting technology environments.
• Evaluate the design and operating effectiveness of IT controls, including:
  • User access and identity/access management
  • Privileged access
  • User provisioning and de-provisioning
  • Segregation of duties
  • Change management
  • System development lifecycle (SDLC)
  • Computer operations
  • Backup, recovery, and business continuity-related controls
• Execute control walkthroughs, develop testing procedures, review supporting evidence, and document testing results.
• Identify control deficiencies, technology risks, and process gaps and clearly communicate findings to stakeholders.
• Assist with development of audit workpapers, risk assessments, testing documentation, and audit reports.
• Work with control owners and technology teams to understand root causes and support remediation and validation activities.
• Assess IT controls supporting financially significant applications and business processes.
• Partner with Internal Audit, Technology Risk, Information Security, Compliance, Finance, and business teams throughout the engagement.
• Support audits and assessments involving regulatory requirements and industry control frameworks.
• Manage assigned audit activities and deliverables against established project timelines.

Required Qualifications

• 5+ years of IT Audit, IT Risk, Technology Controls, or similar experience, with significant hands-on ITGC experience.
• Previous experience within the banking or financial services industry.
• Strong understanding of ITGC domains, particularly access management, change management, SDLC, and IT operations.
• Experience performing control walkthroughs, control testing, evidence review, deficiency identification, and audit documentation.
• Knowledge of SOX ITGC environments and risk-based audit methodologies.
• Ability to evaluate complex technology processes and translate technical risks into clear business and control implications.
• Strong written and verbal communication skills with the ability to interact effectively with technology teams, control owners, auditors, and senior stakeholders.
• Ability to work independently in a fast-paced, highly regulated environment.

Preferred Qualifications

• Experience auditing large, complex banking technology environments.
• Familiarity with regulatory expectations applicable to large financial institutions.
• Experience with cybersecurity controls, information security, cloud environments, third-party technology risk, automated controls, and application controls.
• Familiarity with frameworks and standards such as COBIT, NIST, ISO 27001, COSO, and SOX.
• Experience using audit/GRC platforms such as Archer, ServiceNow GRC, or AuditBoard.
• Professional certifications such as CISA, CIA, CISSP, CRISC, or CPA are preferred but not required.