IT Finance Audit & Compliance Consultant

Position Overview: JSR Tech Consulting is seeking a Mid-Level IT Finance Audit & Compliance Consultant to support governance, risk, audit, and compliance initiatives across client environments. The ideal candidate will work closely with IT, Finance, Internal Audit, Security, and business stakeholders to assess controls, support audit activities, and ensure compliance with regulatory and industry frameworks, including SOX, ISO 27001, ISO 9001, and NIST Cybersecurity Framework (CSF). This role is suited for professionals with 5-8 years of experience in IT audit, compliance, risk management, cybersecurity governance, or financial systems controls.

Key Responsibilities: Support IT and Finance audit engagements, including internal, external, and regulatory audits. Perform testing of IT General Controls (ITGCs) and application controls supporting financial reporting. Assist with SOX compliance activities, including control documentation, testing, evidence collection, and remediation tracking. Conduct compliance assessments against organizational policies and industry standards. Prepare audit workpapers, compliance reports, and risk assessments. Risk Management & Controls Evaluate the effectiveness of IT and business controls. Identify compliance gaps, control deficiencies, and risk exposures. Support remediation planning and corrective action tracking. Participate in vendor and third-party risk assessments. Maintain risk and control matrices (RCMs). Security & Governance Assist with compliance initiatives aligned to: ISO 27001 Information Security Management Systems (ISMS) ISO 9001 Quality Management Systems (QMS) Sarbanes-Oxley (SOX) NIST Cybersecurity Framework (CSF) NIST SP 800-53 Security Controls Review user access management, change management, backup/recovery, and cybersecurity controls. Support policy and procedure development and updates. Documentation & Reporting Develop and maintain compliance documentation, process flows, and control narratives. Track audit findings and remediation status. Provide compliance status reporting to management and project stakeholders. Support audit readiness and continuous improvement initiatives.

Required Qualifications: Bachelor's degree in Information Systems, Accounting, Finance, Cybersecurity, Business, or related field. 5+ years of experience in: IT Audit SOX Compliance IT Risk Management Information Security Governance Internal Controls Understanding of ITGCs, access controls, change management, and financial systems controls. Experience working with auditors and compliance teams. Strong analytical, documentation, and communication skills.

Preferred Qualifications: Experience supporting public company SOX programs.

Core Competencies: SOX Compliance