Senior Associate – IT Risk Advisory

Role Overview

• Gain an understanding of the assigned clients’ objectives as well as their regulatory and risk management environment
• Assist projects in the areas of IT General Control Assessments, Sarbanes-Oxley Compliance, and potentially Cybersecurity Engagements
• Utilize existing knowledge of client’s industry and IT environment to identify technological developments to evaluate impacts on the client’s business
• Assess internal controls’ design adequacy to mitigate financial, operational, and compliance risks and to test their operating effectiveness
• Obtain and analyze data as a basis for reviewing the adequacy, effectiveness, and efficiency of systems and processes
• Exhibit proficiency with creating internal controls process flows and risk/control matrices
• Maintain the level of technical competency and professional care required for the completion of assignments in accordance with COSO, COBIT, and ISO auditing standards and related control techniques
• Set priorities, ensuring daily coordination among the project team, and monitor progress against schedules, budgets, project/task deliverables and status reporting
• Plan, review, and provide direction for the work of Staff and Senior Consultants
• Communicate extensively with clients to drive expectations and report on the status of ongoing projects
• Deliver oral and written presentations during and at the conclusion of projects by either recommending improvements or any operational/financial deficiencies to executive leadership
• Stay abreast of emerging risk areas, IT trends, and related control techniques

Requirements

• Bachelor's and/or Master’s degree in Accounting, Finance, Management Information Systems, or another relevant field
• Relevant certification preferred, such as CISA, CISSP, CISM, CGEIT, or CIPP; CPA or CIA is also valued but not required
• 3+ years of experience working as IT auditor or IT risk advisor for a public accounting firm. Experience should include performing internal or external IT audits
• Demonstrated knowledge of IT risk management, general and application controls, cybersecurity principles, and regulatory frameworks such as SOX, NIST, or ISO

Tech Stack

• Cyber Security

Benefits

• Full range of benefits including medical, dental, and vision insurance
• 401(k) with company match
• PTO