Many of the large consulting companies have, at least small, forensic departments in the Risk Advisory services, so check out PWC, Ernst and Young, KPMG and D&T (the big 4) and also ISS, TruSecure...