IT Risk Advisory - Manager

IT Risk Advisory - Manager

CFGI, founded in 2000, is a dynamic and fast-growing financial consulting firm, serving as the trusted partner to CFOs and their organizations. We help clients tackle complex challenges across accounting, financial reporting, transactions, risk management, regulatory compliance, and digital transformation. We blend deep technical expertise with a hands-on, entrepreneurial approach to help the world’s leading companies move forward with confidence. We are actively expanding our IT Risk Advisory practice and seeking experienced professionals ready to deliver measurable impact for clients across a variety of industries.

We are seeking a results-driven Manager to lead IT risk advisory engagements for clients across a variety of industries. Managers oversee day-to-day engagement delivery, mentor Consultants, collaborate with senior client stakeholders, and serve as trusted advisors in delivering IT internal audit, SOX compliance, technology risk, cybersecurity governance, and IT controls advisory services.

What you might expect:

• Lead IT internal audit, IT SOX compliance, and technology risk advisory engagements across a variety of industries.
• Manage IT General Controls (ITGCs), SOX compliance, SOC reporting, IT risk assessments, cybersecurity governance, and technology compliance engagements.
• Review IT process documentation, including process narratives, flowcharts, risk and control matrices, testing documentation, and audit workpapers.
• Lead engagement planning, including project scopes, risk assessments, testing strategies, project plans, and audit procedures.
• Identify opportunities to strengthen IT governance, internal controls, cybersecurity, and operational effectiveness while developing practical recommendations for clients.
• Develop and present client-ready reports, executive presentations, and Audit Committee materials.
• Manage project workstreams, engagement economics, timelines, budgets, and client deliverables.
• Mentor Consultants by providing technical guidance, coaching, and performance feedback.
• Participate in proposal development, client relationship management, recruiting, and business development initiatives.

What you must have:

• 5-9 years of experience in IT audit, IT risk advisory, information security, systems implementation, public accounting, consulting, and/or corporate IT risk.
• Experience leading IT internal audit, IT SOX compliance, IT General Controls (ITGCs), information security, SOC reporting, or technology risk engagements.
• Experience applying IT governance and control frameworks, including SOX ITGCs, COSO, SOC 1, and/or SOC 2.

What sets you apart:

• Experience leading IT internal audit, SOX compliance, technology risk, cybersecurity governance, or compliance assessments.
• Experience developing and reviewing IT process documentation, including process narratives, flowcharts, risk and control matrices, audit workpapers, and testing documentation.
• Experience performing or leading IT control design assessments, walkthroughs, testing procedures, remediation activities, and technology control improvement initiatives.
• Experience applying cybersecurity and IT governance frameworks such as ISO 27001, NIST Cybersecurity Framework (CSF), COBIT, HIPAA, FAIR, PCI DSS, or similar regulatory and compliance standards.
• Experience leading project teams, managing engagement economics, mentoring junior professionals, and serving as a primary point of contact for client stakeholders.
• Experience contributing to proposal development, business development, or practice initiatives.

Nice to have:

• CISA, CIA, CISSP, CPA, Security+, or other relevant professional certification.
• Bachelor’s degree in Computer Science, Information Systems, Information Technology, Cybersecurity, Management Information Systems, Accounting, or a related field.
• MBA or other relevant graduate degree.
• Experience supporting ERP implementations, cloud environments, identity and access management (IAM), governance, risk and compliance (GRC) technologies, or technology transformation initiatives.

Who thrives here:

• Excellent interpersonal, written, and verbal communication skills with the ability to build relationships across client and engagement teams.
• Proactive in identifying client needs and developing trusted client relationships.
• Highly organized with the ability to manage multiple workstreams and competing priorities.
• Strong analytical and structured problem-solving abilities.
• Entrepreneurial, self-motivated, adaptable, ethical, and dependable.
• High energy with a commitment to delivering exceptional client service while mentoring and developing junior team members.