IT Risk Senior Associate

This is a fully remote position, open to applicants in California, +5 more states.

📋 Description

• Evaluate the design and operational efficiency of IT General Controls (ITGC).

• Create and implement remediation plans.

• Conduct IT risk evaluations.

• Comprehend the objectives and regulatory and risk management landscapes of assigned clients.

• Support IT General Control Assessments, Sarbanes-Oxley Compliance, and potentially Cybersecurity Engagements.

• Analyze technological advancements and their effects on clients' enterprises.

• Review the adequacy of internal controls' design and test their operational effectiveness.

• Gather and examine data to assess the adequacy, effectiveness, and efficiency of systems and processes.

• Develop internal controls process diagrams and risk/control matrices.

• Utilize COSO, COBIT, and ISO auditing standards alongside related control techniques.

• Prioritize tasks, coordinate project teams, and oversee schedules, budgets, deliverables, and status updates.

• Plan, evaluate, and guide the efforts of Staff and Senior Consultants.

• Engage with clients, manage their expectations, and communicate project progress.

• Present oral and written recommendations for enhancements or report on operational/financial shortcomings to executive leadership.

• Keep up-to-date with emerging risk factors, IT trends, and control methodologies.

• Participate in both internal and external activities, including community service, training, recruitment, and firm events.

⛳️ Requirements

• Bachelor's and/or Master’s degree in Accounting, Finance, Management Information Systems, or a related field.

• Relevant certifications preferred, such as CISA, CISSP, CISM, CGEIT, or CIPP; CPA or CIA is appreciated but not mandatory.

• A minimum of 3 years of experience as an IT auditor or IT risk advisor within a public accounting firm.

• Experience conducting internal or external IT audits.

• Familiarity with IT risk management, general and application controls, cybersecurity principles, and regulatory frameworks like SOX, NIST, or ISO.

• Capability to establish and nurture client relationships.

• Proficient in communicating with diverse audiences and crafting compelling narratives from data.

• Skilled at identifying problems and proposing solutions in a fast-paced work setting.

• Willingness and ability to travel as necessary based on client locations.

• Legally authorized to work in the United States.

🏝️ Benefits

• Medical, dental, and vision insurance.

• 401(k) plan with company matching.

• Paid time off (PTO).

• Flexible working arrangements.

• Progressive benefits.

• Significant opportunities for impactful work that supports well-being both inside and outside the office.