Risk Advisory Consultant

Job Summary

Supporting the execution of Risk Advisory client engagements, the full-time remote Risk Advisory Consultant will perform SOC 2 readiness assessments, conduct ISO 27001 gap assessments, and evaluate IT General Controls while managing multiple client relationships across various industries.

Key responsibilities

• Perform SOC 2 Type I/II readiness assessments and conduct ISO 27001 gap assessments for clients
• Test and evaluate IT General Controls (ITGCs), documenting findings and providing remediation recommendations
• Manage multiple concurrent client engagements, ensuring quality results and adherence to schedules

Required qualifications

• 2-4 years of hands-on experience in IT audit, compliance, or GRC consulting
• Demonstrated understanding of IT General Controls (ITGCs) and audit standards such as SSAE 18 or ISAE 3402
• Ability to conduct risk assessments and compliance reviews across frameworks like SOC 2 and ISO 27001
• Strong analytical skills to identify complex risk scenarios and provide practical solutions
• Prior experience at a Big 4 firm, mid-tier CPA/advisory firm, or boutique IT audit/attestation firm is preferred