Must have 5+ years in IT Audit/IT Risk Management, with SOX and either ICFR or ITGC Big 4 experience (Ernst & Young, KPMG, PWC, Deloitte, etc), especially from E&Y is a.