Consultant - IT Advisory - Vendor Risk Management - Big4

IT Advisory - Consultant Position

Projects in IT Advisory focus on the assessment and/or evaluation of IT systems/ processes and the mitigation of IT-related business risks. As part of vendor risk management, this includes designing vendor information security risk management framework, performing vendor reviews focused on different standards such as ISO27001, ISO22301, ISO31000 and domains such as information security, business continuity and privacy.

Responsibilities

- Work with the engagement team to document the business processes dependent on information technology and creating applicable workpapers deliverables.

- Demonstrate and apply a thorough understanding of complex information systems.

- Use knowledge of the current IT environment and industry IT trends to identify the engagement and client service issues, and communicate this information to the engagement team's AM.

- Demonstrate and apply strong IT controls testing and documentation skills, inspire teamwork and responsibility with engagement team members, and use current technology and tools to enhance the effectiveness of deliverables and services.

To qualify, candidates must have:

- A bachelor's degree in engineering and approximately 4-5 years of related work experience; or a master's or MBA degree in business, computer science, information systems, engineering, or a related discipline degree and approximately 3-4 years of related work experience

- Experience working in Information Security domain, vendor risk assessment domain, IT auditor or IT risk advisor with a professional services firm, or within industry

- Significant experience in having applied relevant technical knowledge in at least one of the following engagements: (a) Vendor information security program design/ review (b) ISO standards (ISO27001, ISO22301, ISO31000) implementation assistance or review

- Advanced written and verbal communication skills and presentation skills

- Excellent teamwork and client service skills

CA, CISA, CISSP certifications are a plus.