Job Summary:The
Advisory Senior Associate will be responsible for leading the day-to-day execution and delivery of a range of projects focused on SOC examinations and reporting, IT internal audit and advisory, IT governance and risk assessment, system implementation reviews, Sarbanes-Oxley compliance, PCI, and information security. The Advisory practice is well-positioned to pace the overall growth of the Firm due to our unique positioning in the marketplace and overall demand for our services. We are seeking self-motivated and qualified candidates with a passion for quality client service to join our growing team.
Duties & Responsibilities:- Lead day-to-day execution of advisory engagements, including SOC 1/SOC 2 examinations, IT internal audits, IT risk assessments, and information security reviews.
- Perform detailed testing and evaluation of IT general controls (ITGCs), application controls, cybersecurity controls, and operational processes.
- Assess client environments against industry frameworks such as COBIT, NIST, ISO 27000, PCI, HIPAA, and AICPA trust services criteria.
- Support Sarbanes-Oxley (SOX) compliance efforts, including walkthroughs, control design assessments, and testing in accordance with PCAOB standards.
- Evaluate system implementation projects to ensure appropriate controls, governance, and risk mitigation practices are in place.
- Prepare high-quality workpapers, audit documentation, and client deliverables that clearly communicate findings, risks, and recommendations.
- Collaborate with client stakeholders, external auditors, and internal teams to clarify expectations, resolve issues, and ensure timely engagement delivery.
- Identify control gaps, process inefficiencies, and improvement opportunities; develop practical, value-added recommendations.
- Assist in drafting SOC reports, risk assessment summaries, audit reports, and executive-level presentations.
- Mentor, train, and review work of staff associates to support their professional development.
- Contribute to engagement planning, scoping, and risk assessment activities.
- Maintain strong working knowledge of emerging technologies, regulatory trends, and industry best practices.
- Manage multiple projects simultaneously while meeting deadlines and maintaining high-quality standards.
Education & Experience: - 3+ years of Information Security or Information Technology experience required
- Bachelor's degree in Accounting, Finance, Management Information Systems(MIS), or related field required
- CISA candidate, other certifications accepted (CPA, CISSP, CIA, etc.)
- Demonstrated success in a client service role, preferably with Big 4 or national advisory firm
- Familiarity with variety of technologies, operating systems, databases, and reporting and data analytics tools
- Ability to interact with external auditors and members of management to deliver expectations and communicate and interpret key audit priorities and issues, including PCAOB and AICPA trends
- Exceptional organizational skills with capability to present to Board / C-suite audience
- Strong written and verbal communication skills
- Experience related to the following areas:
- SSAE 18 / SOC 1 / SOC 2
- Sarbanes-Oxley and PCAOB requirements
- IT risk assessment / operational IT audit
- IT general controls
- COBIT framework
- PCI
- Information security / cyber frameworks (ISO 27000, NIST, AICPA, etc.)
- HIPAA
- Systems development life cycle
- Business acumen, ability to anticipate and escalate issues
- Ability meet deadlines
- Working knowledge of basic financial accounting, auditing and financial reporting concepts
- Teaching and staff development
- Ability and appetite to invest into relationships
- Exemplify a positive attitude and strong work ethic with a commitment to teamwork and professionalism.
- Ability to travel 20% to 40%
#LI - hybrid
