IT Risk and Controls Director - Financial Advisory Services

Experience a 45X+ award-winning culture!

Embarkers enjoy:

• Work-life integration: We encourage our team to balance work with personal life. 95% of our employees feel they can take time off when necessary

• Growth and development: We offer continuous learning opportunities, including CPE credits and coaching, to support our employees' professional growth and ensure they execute excellently for clients

• Award-winning culture: Recognized for our outstanding workplace environment, we prioritize the happiness and well-being of our team

Embark isn't your ordinary consulting firm. We’re committed to cultivating a workplace where everyone can thrive—where happiness is at the core of our success. Where Happy Works. Our team is dedicated to solving complex problems for finance, accounting, HR, and technology leaders with forward-thinking solutions and unparalleled hospitality. Here are a few reasons why 93% of Embarkers agree that we offer special and unique benefits:

• Unlimited PTO: Enjoy unlimited PTO to recharge and pursue your passions

• Comprehensive healthcare: 100% paid premiums for you and your family

• Whole human growth: $150 monthly stipend for holistic development

• Career advancement: Access to CPE credits, learning platforms, coaching, and professional development

• Financial support: Up to 3% 401(k) matching and financial advisory services

• Team and community engagement: Monthly social events within your market, charitable matching, and great people!

What you’ll be doing

We are seeking an experienced IT Risk Advisory Director to expand and lead our IT Risk offerings within the Governance, Risk, and Compliance (GRC) practice. This senior-level role is both delivery- and growth-focused, blending client service excellence with practice development with a primary focus on delivery. This position will advise organizations on IT risk, cybersecurity, and technology-enabled governance frameworks, while also building and scaling a dedicated IT Risk advisory practice.
 

In this role, you will partner with GRC practice leadership to design, implement, and deliver IT risk solutions spanning:

• Information Technology General Controls (ITGCs)

• Cybersecurity threats and resilience

• Vendor and third-party risk management

• Technology components of financial reporting and regulatory compliance
   

The successful candidate will bring deep technical expertise, strong consulting skills, and thought leadership to position the firm as a trusted partner for IT risk and GRC advisory services.
 

Key Responsibilities

• Lead client engagements related to IT risk, ITGCs, cybersecurity, and third-party/vendor risk

• Provide strategic advice and practical solutions that align IT governance with broader risk and compliance objectives

• Partner with practice leadership to develop go-to-market strategies, service offerings, and methodologies for IT risk advisory

• Mentor, train, and manage team members while fostering a high-performance, client-first culture

• Support business development, including proposal development, client presentations, and thought leadership initiatives

• Stay ahead of emerging IT risk, cybersecurity, and regulatory trends to shape client solutions and firm offerings

To be a good fit for our SOX IT Director role, you will have:

• 8-10+ years of experience in IT risk, GRC advisory, or cybersecurity consulting (Big Four or boutique advisory firm experience strongly preferred)

• Bachelor’s degree in Accounting, Management Information Systems, or other relevant degree required (Advanced degree is a plus)

• CPA and/or CIA required, other relevant certifications are a plus (e.g.CISA, CISSP, CISM, CRISC)

• Strong expertise in ITGCs, SOX/financial reporting technology controls, cybersecurity frameworks (e.g., NIST, ISO), and third-party/vendor risk management

• Demonstrated experience building or scaling a consulting practice or service line

• Excellent leadership, people development, and client relationship management skills

• Proven track record of business development and contributing to practice growth

• A high sense of urgency, strong initiative and the ability to multi-task

• Ability to work independently and as part of a team

• The desire to learn new technologies and practices to constantly improve the business of Embark and our clients

• A proactive approach to constant improvement and problem solving

• Communication skills that can effectively relay concepts and updates across all stakeholders from staff to executives

• A drive to forge deep relationships both internally through a variety of culture initiatives and externally through industry leading hospitality efforts
   

Added bonus if you have…

• Cybersecurity experience, including  Vulnerability assessment and penetration testing methodologies and processes for web, thick client and mobile applications

• Business continuity planning and disaster recovery design and implementation
   

What's in it for you:

• We pay 100% of premiums for you and your entire family on health, vision, and life insurance, and short and long-term disability

• Typical compensation range of $175,000-210,000

• We match 50% to 6% on our 401K

• Fully paid parental leave for all new parents

• Monthly stipend for whole human wellness

• All the technology you’ll need to be successful, the most advanced software, and accessories to ensure you get the job done in style

• Monthly team outings (think: axe throwing, a trip to the State Fair, go-kart races, etc.)
   

In closing...

If this role sounds exciting, apply and let's start the conversation!

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law. Upon offer of employment, employees will be asked to submit to a background check and drug screen. Dependent on ongoing client requirements, employees may also be asked to submit to a drug screening and background check throughout employment.