IT Risk Advisory - Manager



CFGI Managers work closely with senior management of FTSE 100/250, mid-cap, and start-up companies, as well as professionals across CFGI from Consultant through Partner. Managers lead project teams and deliver IT risk advisory engagements spanning IT Internal Audit, SOX compliance and testing, attestation and certification readiness, business process improvement, and other compliance and risk assessments.




Roles & Responsibilities:

• Lead IT Internal Audit, SOX compliance and testing, attestation and certification readiness, business process improvement, and other IT risk and compliance assessments.


• Review IT controls testing, process narratives, flowcharts, procedures, and supporting documentation across client engagements.


• Define and approve engagement scope, project plans, risk assessments, testing approaches, and specific audit or assessment procedures.


• Identify control gaps, improvement opportunities, and practical recommendations that add value for clients.


• Prepare reports, presentations, and other client-ready materials communicating findings and recommendations.


• Prepare for and participate in Audit Committee and senior management meetings.


• Develop and manage relationships with client management, external auditors, and other professional service firms.


• Manage project teams, engagement delivery, timelines, and engagement economics.


• Support business development activities with new and existing clients.


• Coach and develop CFGI team members through engagement feedback, training, and day-to-day leadership.


• Contribute to internal projects, team development, training initiatives, and the continual improvement of the Risk Advisory practice.

What you must have:

• 5+ years of experience in audit or advisory roles performing IT audit, systems implementation, information security, or related IT risk work.

What sets you apart:

• Experience leading or reviewing IT audit, IT controls, SOX compliance, information security, or related technology risk engagements.


• Experience reviewing IT controls testing, process narratives, flowcharts, procedures, risk assessments, or other audit and assessment documentation.


• Experience developing engagement scopes, project plans, risk assessments, testing approaches, and audit or assessment procedures.


• Experience applying IT control and assurance frameworks, including SOX IT General Controls, COSO, SOC 1, and/or SOC 2.


• Experience preparing reports, recommendations, or presentations for senior management, Audit Committees, or other senior stakeholders.


• Experience leading project teams, developing junior professionals, managing engagement economics, and maintaining client relationships.


• Experience contributing to business development with new or existing clients.

Nice to have:

• ACA, ACCA, CISA, CISM, or another relevant audit or information security certification.


• Exposure to ISO 27001, GDPR, or other relevant information security, privacy, or compliance standards.

Who thrives here:

• Strong interpersonal, written, and verbal communication skills with the ability to work effectively across client and internal teams.


• Strong analytical and critical-thinking abilities.


• An entrepreneurial and self-motivated approach to work.


• High standards of integrity, dependability, and professional accountability.


• A collaborative working style and commitment to developing others.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.