Internal Audit Consultant

Required Skills & Experience

6–8 years of experience in IT audit, information security, or IT risk management, preferably within a global manufacturing environment. CISA or CISSP certification required. Bachelor’s degree in Computer Science, Information Systems, Business Administration, Accounting, or related field. Experience auditing SAP or similar integrated business applications and their interfaces. Strong knowledge of ITGCs, SOX controls, cybersecurity assessments, and IT risk management. Working knowledge of NIST SP 800-171, CMMC 2.0, and related DoD cybersecurity policy. Knowledge of ISO 27000, COBIT, NIST, and COSO frameworks. Experience with cloud and infrastructure environments including Azure, AWS, Google Cloud, Active Directory, firewalls, and routers. Familiarity with GovCloud and Microsoft 365 GCC/GCC High and their CMMC implications. Experience managing or supporting IT audits and presenting recommendations to senior leadership.

Job Description

Insight Global is seeking a Consultant, Internal Audit – IT to support a large enterprise client in Plano, TX. This individual will be responsible for leading and conducting IT audits and reviews across systems, applications, infrastructure, security, and IT processes.

The ideal candidate will bring a strong background in IT audit, IT risk management, information security, ITGCs, and SOX controls, with the ability to work across complex global technology environments. This role will also support cybersecurity and compliance assessments related to NIST SP 800-171 and CMMC 2.0 and will interact with senior management to communicate findings, recommend improvements, and drive remediation efforts.

Responsibilities include the below:

Lead IT audits across systems, applications, infrastructure, security, and IT processes. Perform security audits across ERP/SAP, networks, operating systems, databases, shop-floor, and quality systems. Conduct assessments related to NIST SP 800-171 and CMMC 2.0 compliance. Perform and review SOX testing, including ITGCs, application controls, and key reports. Develop risk and control matrices and provide recommendations around application and infrastructure security. Conduct pre- and post-implementation reviews for major system enhancements and global deployments. Communicate audit findings to senior management and support remediation of identified deficiencies. Support annual IT audit planning and coordinate with internal and outsourced audit teams.