JOB DUTIES:

• Assist organizations to assess the effectiveness of their IT risk management and control processes and develop and strengthen risk and compliance programs. Effectively manage core components of projects including work plans, staffing, deadlines, and budgets to help stakeholders respond to opportunities, address complex change, and improve operations.
• Conduct Sarbanes-Oxley compliance audits to assess the design and operating effectiveness of IT controls in accordance with audit standards by performing and documenting IT control walkthroughs and testing procedures.
• Perform pre and post implementation procedures for new IT applications and infrastructure components (e.g. Databases) to ensure appropriate controls, executive approvals and data migration procedures are in place and identify control gaps and weaknesses.
• Execute control risk assessments and identify and test IT controls to mitigate identified risks and communicate control gaps and issues to management.
• Conduct and lead on-site observation and audit walkthrough meetings with business and IT application owners to understand the current IT environment and business and IT processes (e.g. Access Management, Change Management, and IT Operations) over financially relevant IT applications and infrastructure.
• Provide written and verbal communication of audit findings to management in a timely manner and generate high impact recommendations leading to significant improvements in the clients’ IT Controls environment.
• Serve as liaison between the client, project team, and other stakeholders and set and manage expectations effectively while overseeing the operational aspects of ongoing projects.
• Develop and review project management documentation (E.g., Project Charter, Budget Analysis, Communication Plan, and Risk Register) in support of project execution and ensure project deliverables are of the highest quality.
• Support CrossCountry’s leadership team on internal projects, including but not limited to Sales/Marketing initiatives, Professional Development & Training, Knowledge Management, Communications, Recruiting and Organizational Development.

JOB REQUIREMENTS: Bachelor’s degree in Finance, Commerce, Accounting, Business Management, Business Administration, Economics, Information Systems, or related field and 6 years of experience in risk advisory involving internal audit, governance, risk, data analysis and compliance.

Prior experience must include:

• 6 years performing Risk and internal control assessments for clients within highly regulated environments;
• 6 years implementing technology risk programs for various clients needs, including IT Governance, risk, compliance, cybersecurity, cloud, privacy, third-party risk management, data, and resiliency;
• 6 years evaluating, designing, and testing internal controls to identify and mitigate risk;
• 6 years overseeing teams and communicating autonomously with clients;
• 6 years of public speaking and presentation experience;
• 5 years managing walkthroughs to document client processes, including narratives, flow charts, and risk control matrixes;
• 2 years of experience with Sarbanes-Oxley Act (SOX), COSO, and PCAOB framework and compliance; and
• 1 year of experience with one of the “Big 4” accounting firms performing and managing internal key controls assessments.