IT Risk Manager (Internal Audit & SOX)
for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We need to parse the job description.
We have:
- Job Description (intro paragraph) describing role. Could be "About the role" maybe.
- Then bullet list of day-to-day tasks: "Your day-to-day may include:" then list items. Those are responsibilities.
- Then "You have the following technical skills and qualifications:" then list of qualifications, skills, etc.
- Then "The base salary range for this position is between $138,000 and $172,500." That's pay.
- Then "About Us" paragraph about company.
- Then "About The Team" paragraph about work location, hybrid model, etc. Could be schedule? It mentions "Consistent with the firm's hybrid work model, this position will require in-person attendance at least three days per week". That's schedule info.
- Then benefits: "Benefits: We understand that your needs..." then link.
- Also there is "Additional Details:" with EEO etc which we should remove (boilerplate). Also "See how at www.gt.com/careers" etc.
We need to remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions.
Thus we keep:
- About the role: maybe the introductory paragraph(s) before responsibilities.
- Responsibilities: the list after "Your day-to-day may include:" (the bullet list). Also maybe some other responsibilities like "Manage business development activities" etc are part of that list.
- Requirements / Qualifications: The list after "You have the following technical skills and qualifications:" includes degree, experience, certifications, expertise, etc. Could split into Requirements and Qualifications but we can combine? The instruction says use headings for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We can decide which sections have content.
We have content for:
- About the role: intro paragraph(s) describing role.
- Responsibilities: the bullet list of duties.
- Requirements: maybe degree, experience, certification required.
- Qualifications: maybe expertise, skills.
- Skills: maybe leadership, communication etc.
- Benefits: the benefits paragraph.
- Pay: salary range.
- Schedule: hybrid work model requiring in-person attendance at least three days per week.
We need to avoid filler like "commensurate with experience". Not present.
We must not repeat job title as heading.
We must not put Job ID/requisition numbers as headings.
We must output only HTML fragment.
We need to use for section headings, - for any list of duties/requirements/benefits, and
for prose.
We need to preserve all substantive information; do not invent or summarize away detail.
We need to remove boilerplate: EEO, legal, etc. Also "Additional Details:" etc.
We need to keep the link for benefits? The instruction: preserve all substantive information; we can keep the link as part of
maybe.
We need to avoid duplication: there is a Benefits paragraph repeated later with same text; we should include only once.
We need to ensure we don't include "See how at www.gt.com/careers" maybe that's part of About The Team? It's a link; could be considered boilerplate? It's a call to action; maybe we keep as part of About The Team? It's not essential but it's a link to careers page; might be considered navigation? Probably safe to keep as part of About The Team? But it's more like a call to action; but it's not boilerplate legal. However it's a generic link; we could keep it.
But we need to avoid duplication: there is also "Here’s what you can expect next: If you apply and are selected to interview, a Grant Thornton team member will reach out to you to schedule a time to connect. We encourage you to also check out other roles that may be a good fit for you or get to know us a little bit better at www.gt.com/careers." That's application instructions; we should remove.
Thus we keep only substantive content.
Let's extract sections:
**About the role** (intro):
"As an IT Risk Manager, you will get the opportunity to grow and contribute to our clients' business needs by helping them understand their business risks and assist in addressing risk in both proactive and responsive contexts for the Risk, Compliance & Controls Practice – all with the resources, environment, and support to help you excel. You’ll collaborate with teams to execute and report on risk management, internal control and internal audit engagements that develop, assess, or improve the design and operating effectiveness of IT risk management and internal control activities. From day one, you’ll be empowered by the greater Risk team to help clients make the moves that will help them achieve their vision and help you achieve more, confidently."
That's a few sentences; we can put in
.
**Responsibilities** (list):
Your day-to-day may include:
- Perform engagement management responsibilities, including performance reviews, task delegation, project scheduling, project economics and financials, quality review and client management
- Manage business development activities, such as proposals, capture, account teams, whitepapers, conferences, and/or other thought leadership material
- Adhere to the highest degree of professional standards and strict client confidentiality
- Understand and manage firm risk on audits and proposals
- Working with organizations to identify and manage IT risks within their strategy execution model.
- Assist clients in applying key frameworks such as COBIT, NIST & ISO
- Developing IT components with enterprise risk management programs
- Leading IT risk assessments ranging from internal audits, system implementations and specialized IT areas (security, basis, access provisioning, etc.)
- Leading and executing IT audits and IT SOX engagements
- Apply current knowledge of IT trends and systems processes to identify security and risk management issues
- Manage the evaluation and testing of IT processes, system controls and identification of areas of risk
- Manage internal auditing outsourcing and co-sourcing engagements for clients
- Meet or exceed targeted billing hours (utilization) and meet or exceed sales targets for new and follow-on work
- Work closely with Grant Thornton managers and partners to promptly identify and resolve client concerns
- Manage, develop, train, and mentor staff on projects, assess performance for engagement and year-end reviews
- Interview campus and/or experienced candidates
- Other duties as assigned
We need to put each as
- inside
.
**Requirements** (maybe degree, experience, certification):
"You have the following technical skills and qualifications:" then list:
- Bachelor’s degree in Accounting, Finance, Information Technology, MIS, or a related field is required
- Minimum 6 years of related work experience in a similar consulting practice or function servicing cross-industry clients at a national level
- Certification required, CIA,CISA, CISSP, CISM, CPA license/certification preferred
- Experience performing technology risk assessments and audits, operational internal audits, and process control reviews and strong familiarity with IIA’s Standards
- Expertise in one or more of the following: access control software, security architecture and administration, Internet use/firewalls, network security awareness and enforcement, security policies and standards, database security auditing, operating systems (Windows, UNIX, AS400)
- Strong experience in staff and audit management in an integrated client service team
- Exceptional client service, communication, analytical, organizational and project management skills
- Ability to execute multiple engagements and completing priorities in a rapidly growing team environment
- Strong leadership, business development, recruiting, training, coaching, and mentoring skills
- Can travel as needed
We could split into Requirements (degree, experience, certification) and Qualifications (expertise, skills) and Skills (leadership etc). But we have headings for Requirements, Qualifications, Skills. Let's allocate:
- Requirements: Bachelor’s degree, Minimum 6 years experience, Certification required (CIA etc). Possibly also "Experience performing technology risk assessments..." could be qualification.
- Qualifications: Expertise in one or more of the listed items (access control software etc). Also "Strong experience in staff and audit management..." maybe skill.
- Skills: Exceptional client service, communication, analytical, organizational and project management skills; Ability to execute multiple engagements...; Strong leadership, business development, recruiting, training, coaching, and mentoring skills; Can travel as needed.
But we need to ensure we don't lose any detail. We'll create sections accordingly.
**Benefits**: The paragraph: "Benefits: We understand that your needs, responsibilities and experiences are different, and we think that’s a good thing. That’s why we support you with personalized and comprehensive benefits that recognize and empower all the identities, roles and aspirations that make you, well, you. For an overview of our benefit offerings, please visit: https://www.grantthornton.com/careers/rewards-and-benefits"
We should keep that as . Also there is a duplicate later; we ignore duplicate.
**Pay**: "The base salary range for this position is between $138,000 and $172,500. Placement within the pay range is at Grant Thornton’s discretion, and it is based on multiple factors, including but not limited to, job -related knowledge/skills, experience, business needs, progression within the role, geographic location, and internal equity. At Grant Thornton, compensation decisions are dependent upon the facts and circumstances of each position and candidate."
We keep that as
.
**Schedule**: From About The Team: "Consistent with the firm's hybrid work model, this position will require in-person attendance at least three days per week, either at a GT office or client site." Also maybe mention flexible schedule etc. The About The Team paragraph includes: "Whether it's your work location, weekly schedule, or flex time off, we empower you with the options to work the way that it best serves your clients and your life." That's also schedule/flex. We can combine.
Thus schedule section:
Whether it's your work location, weekly schedule, or flex time off, we empower you with the options to work the way that it best serves your clients and your life. Consistent with the firm's hybrid work model, this position will require in-person attendance at least three days per week, either at a GT office or client site.
**About Us**: Could be considered "About the role"? Already have About the role. There's also "About Us" paragraph about company. Could be a separate section maybe "About the company". But headings list does not include About Us; only About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we should not create About Us heading; we could incorporate that info into About the role? But About the role already describes role; About Us is company overview. The instruction says to include a section ONLY when the posting has real, specific content for it — never emit a heading followed by filler/placeholder text. It lists possible headings but does not require to use all; we can choose which to include. The About Us content is substantive; but there is no heading for About Us in the list. However we could treat it as "About the role"? Not appropriate. Maybe we can omit it because not in allowed headings? The instruction: "use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." The e.g. suggests those are examples, not exhaustive? It says "use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." Likely they expect us to use those headings when appropriate. It doesn't forbid other headings, but they gave examples. Safer to stick to those headings. So we may omit About Us content if it doesn't fit any of those headings. But we could incorporate some of it into About the role? Might be stretching. However the About Us content is about the company,
- for any list of duties/requirements/benefits, and
for prose. We need to preserve all substantive information; do not invent or summarize away detail. We need to remove boilerplate: EEO, legal, etc. Also "Additional Details:" etc. We need to keep the link for benefits? The instruction: preserve all substantive information; we can keep the link as part of
maybe. We need to avoid duplication: there is a Benefits paragraph repeated later with same text; we should include only once. We need to ensure we don't include "See how at www.gt.com/careers" maybe that's part of About The Team? It's a link; could be considered boilerplate? It's a call to action; maybe we keep as part of About The Team? It's not essential but it's a link to careers page; might be considered navigation? Probably safe to keep as part of About The Team? But it's more like a call to action; but it's not boilerplate legal. However it's a generic link; we could keep it. But we need to avoid duplication: there is also "Here’s what you can expect next: If you apply and are selected to interview, a Grant Thornton team member will reach out to you to schedule a time to connect. We encourage you to also check out other roles that may be a good fit for you or get to know us a little bit better at www.gt.com/careers." That's application instructions; we should remove. Thus we keep only substantive content. Let's extract sections: **About the role** (intro): "As an IT Risk Manager, you will get the opportunity to grow and contribute to our clients' business needs by helping them understand their business risks and assist in addressing risk in both proactive and responsive contexts for the Risk, Compliance & Controls Practice – all with the resources, environment, and support to help you excel. You’ll collaborate with teams to execute and report on risk management, internal control and internal audit engagements that develop, assess, or improve the design and operating effectiveness of IT risk management and internal control activities. From day one, you’ll be empowered by the greater Risk team to help clients make the moves that will help them achieve their vision and help you achieve more, confidently." That's a few sentences; we can put in
. **Responsibilities** (list): Your day-to-day may include: - Perform engagement management responsibilities, including performance reviews, task delegation, project scheduling, project economics and financials, quality review and client management - Manage business development activities, such as proposals, capture, account teams, whitepapers, conferences, and/or other thought leadership material - Adhere to the highest degree of professional standards and strict client confidentiality - Understand and manage firm risk on audits and proposals - Working with organizations to identify and manage IT risks within their strategy execution model. - Assist clients in applying key frameworks such as COBIT, NIST & ISO - Developing IT components with enterprise risk management programs - Leading IT risk assessments ranging from internal audits, system implementations and specialized IT areas (security, basis, access provisioning, etc.) - Leading and executing IT audits and IT SOX engagements - Apply current knowledge of IT trends and systems processes to identify security and risk management issues - Manage the evaluation and testing of IT processes, system controls and identification of areas of risk - Manage internal auditing outsourcing and co-sourcing engagements for clients - Meet or exceed targeted billing hours (utilization) and meet or exceed sales targets for new and follow-on work - Work closely with Grant Thornton managers and partners to promptly identify and resolve client concerns - Manage, develop, train, and mentor staff on projects, assess performance for engagement and year-end reviews - Interview campus and/or experienced candidates - Other duties as assigned We need to put each as
- inside
- .
**Requirements** (maybe degree, experience, certification):
"You have the following technical skills and qualifications:" then list:
- Bachelor’s degree in Accounting, Finance, Information Technology, MIS, or a related field is required
- Minimum 6 years of related work experience in a similar consulting practice or function servicing cross-industry clients at a national level
- Certification required, CIA,CISA, CISSP, CISM, CPA license/certification preferred
- Experience performing technology risk assessments and audits, operational internal audits, and process control reviews and strong familiarity with IIA’s Standards
- Expertise in one or more of the following: access control software, security architecture and administration, Internet use/firewalls, network security awareness and enforcement, security policies and standards, database security auditing, operating systems (Windows, UNIX, AS400)
- Strong experience in staff and audit management in an integrated client service team
- Exceptional client service, communication, analytical, organizational and project management skills
- Ability to execute multiple engagements and completing priorities in a rapidly growing team environment
- Strong leadership, business development, recruiting, training, coaching, and mentoring skills
- Can travel as needed
We could split into Requirements (degree, experience, certification) and Qualifications (expertise, skills) and Skills (leadership etc). But we have headings for Requirements, Qualifications, Skills. Let's allocate:
- Requirements: Bachelor’s degree, Minimum 6 years experience, Certification required (CIA etc). Possibly also "Experience performing technology risk assessments..." could be qualification.
- Qualifications: Expertise in one or more of the listed items (access control software etc). Also "Strong experience in staff and audit management..." maybe skill.
- Skills: Exceptional client service, communication, analytical, organizational and project management skills; Ability to execute multiple engagements...; Strong leadership, business development, recruiting, training, coaching, and mentoring skills; Can travel as needed.
But we need to ensure we don't lose any detail. We'll create sections accordingly.
**Benefits**: The paragraph: "Benefits: We understand that your needs, responsibilities and experiences are different, and we think that’s a good thing. That’s why we support you with personalized and comprehensive benefits that recognize and empower all the identities, roles and aspirations that make you, well, you. For an overview of our benefit offerings, please visit: https://www.grantthornton.com/careers/rewards-and-benefits"
We should keep that as
. Also there is a duplicate later; we ignore duplicate. **Pay**: "The base salary range for this position is between $138,000 and $172,500. Placement within the pay range is at Grant Thornton’s discretion, and it is based on multiple factors, including but not limited to, job -related knowledge/skills, experience, business needs, progression within the role, geographic location, and internal equity. At Grant Thornton, compensation decisions are dependent upon the facts and circumstances of each position and candidate." We keep that as
. **Schedule**: From About The Team: "Consistent with the firm's hybrid work model, this position will require in-person attendance at least three days per week, either at a GT office or client site." Also maybe mention flexible schedule etc. The About The Team paragraph includes: "Whether it's your work location, weekly schedule, or flex time off, we empower you with the options to work the way that it best serves your clients and your life." That's also schedule/flex. We can combine. Thus schedule section:
Whether it's your work location, weekly schedule, or flex time off, we empower you with the options to work the way that it best serves your clients and your life. Consistent with the firm's hybrid work model, this position will require in-person attendance at least three days per week, either at a GT office or client site.
**About Us**: Could be considered "About the role"? Already have About the role. There's also "About Us" paragraph about company. Could be a separate section maybe "About the company". But headings list does not include About Us; only About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we should not create About Us heading; we could incorporate that info into About the role? But About the role already describes role; About Us is company overview. The instruction says to include a section ONLY when the posting has real, specific content for it — never emit a heading followed by filler/placeholder text. It lists possible headings but does not require to use all; we can choose which to include. The About Us content is substantive; but there is no heading for About Us in the list. However we could treat it as "About the role"? Not appropriate. Maybe we can omit it because not in allowed headings? The instruction: "usefor section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." The e.g. suggests those are examples, not exhaustive? It says "use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." Likely they expect us to use those headings when appropriate. It doesn't forbid other headings, but they gave examples. Safer to stick to those headings. So we may omit About Us content if it doesn't fit any of those headings. But we could incorporate some of it into About the role? Might be stretching. However the About Us content is about the company,