Senior Consultant – Technology Risk & Internal Controls

Your Journey at Crowe Starts Here: At Crowe, you can build a meaningful and rewarding career. With real flexibility to balance work with life moments, you’re trusted to deliver results and make an impact. We embrace you for who you are, care for your well-being, and nurture your career. Everyone has equitable access to opportunities for career growth and leadership. Over our 80-year history, delivering excellent service through innovation has been a core part of our DNA across our audit, tax, and consulting groups. That’s why we continuously invest in innovative ideas, such as AI-enabled insights and technology-powered solutions, to enhance our services. Join us at Crowe and embark on a career where you can help shape the future of our industry.

What It Means to Be a Consultant at Crowe Consulting is a dynamic business focused on solving problems for our clients and serving our core markets through innovative solutions. As technology and AI continue to reshape the consulting landscape, we are looking for individuals who are curious, adaptable, and eager to learn. At Crowe, consultants are expected to build both technical and transferable skills, think critically, and use technology to solve real business problems. In this role, you will continuously learn, collaborate across teams, and explore how tools, including emerging AI capabilities, can improve efficiency, insights, and client outcomes. As you grow, you’ll also begin to take ownership of client relationships, contribute to account strategy, and support the delivery of high-impact work. Developing a sense of account leadership, including understanding client needs, ensuring delivery excellence, and building trusted partnerships, is part of what sets successful consultants apart. Success in this role comes from a growth mindset, strong communication skills, advanced critical thinking, and the ability to navigate new challenges with confidence. The Technology Risk and Controls Senior Staff professional is experienced contributor who supports client projects by performing IT control testing, documentation, and compliance review activities. This position is a key execution resource to internal audit and advisory engagements by supporting risk assessment, IT process and control walkthrough and testing via evidence evaluation. You’ll develop a deeper understanding of how technology supports business objectives and learn to identify and mitigate risks that impact security, compliance, and performance. You’ll gain exposure to diverse clients, industries, and technologies while building a strong foundation for advancement into internal audit leadership or risk consulting roles.

Independently execute detailed testing procedures over access management, change management, IT operations, and system interfaces in accordance with firm methodologies and regulatory standards (e.g., SOX, SOC, NIST, ISO 27001). Able to identify and document key IT risks, control gaps, and improvement opportunities across enterprise systems, cloud environments, and digital platforms. Proactively analyze and clearly articulate the design and effectiveness of automated controls, system configurations, and data flows that support financial, operational, and compliance objectives. Prepare clear, well-supported documentation and workpapers in accordance with firm and regulatory standards. Work closely with business, risk, and technology stakeholders, including management, IT leadership, and occasionally regulators, to communicate findings and recommendations clearly and professionally. Contribute to the development of reports and client deliverables that summarize observations, root causes, and practical recommendations for risk mitigation and process improvement. Build foundational skills in areas such as cybersecurity, cloud computing, identity and access management, data analytics, automation tools, and industry-specific regulations (e.g., HIPAA, SEC, FFIEC).