Bachelor's and/or Master's degree in Accounting, Finance, Management Information Systems, or relevant field
Relevant certifications preferred (CISA, CISSP, CISM, CGEIT, or CIPP); CPA valued but not required
Minimum 8 years of experience as IT auditor or IT risk advisor, focusing on IT compliance
Knowledge of IT risk management and regulatory frameworks like SOX, NIST, or ISO
Strong communication skills for various audience engagement
Passionate about client relationship development
Responsibilities
Lead projects on IT General Controls assessments and SOX compliance
Understand clients' business objectives and IT environment
Assess effectiveness of IT controls related to access and change management
Analyze system data and configurations to identify control gaps
Develop IT control process flows and testing strategies
Communicate project status and drive client expectations
Mentor Staff and Senior Consultants and ensure project delivery
Benefits
Flexible work environment
Diverse and inclusive workplace culture
Commitment to employee development and mentorship
Progressive benefits that support well-being
Participation in community service and internal initiatives
Full Job Description
The Associate Director position for Riveron's IT Risk Advisory group will be the day-to-day lead for consulting engagements working collaboratively with senior team members who provide guidance, coaching, and direction. Associate Directors are expected to conduct the majority of day-to-day project management activities on all of their engagements, including project plan development, reviewing staff work for quality, status updates to clients and internal management, and mentoring of staff and senior consultants.
Who You Are:
Bachelor's and/or Master's degree in Accounting, Finance, Management Information Systems, or another relevant field
Relevant certification preferred, such as CISA, CISSP, CISM, CGEIT, or CIPP; CPA or is also valued but not required
Minimum 8 years working as IT auditor or IT risk advisor for a public accounting firm, or other operational roles with a focus on information technology compliance. Experience should include performing internal or external IT audits
Demonstrated knowledge of IT risk management, general and application controls, cybersecurity principles, and regulatory frameworks such as SOX, NIST, or ISO
You have a passion for developing and maintaining client relationships
You get the job done and have fun doing it
You communicate skillfully with a variety of audiences and can create compelling stories from data
You thrive in an ever-changing, dynamic work environment
You readily identify problems and instinctively look for solutions
You enjoy participating in internal and external company initiatives such as community service, training, recruiting, and firm events
You have the ability and desire to travel as required based on client location
What You'll Do:
Gain an understanding of the assigned clients' business objectives, IT environment, and applicable regulatory and risk management landscape
Lead projects in the areas of IT General Controls (ITGC) assessments, Sarbanes-Oxley (SOX) IT compliance, ERP/application control reviews, and cybersecurity risk assessments
Leverage knowledge of industry-specific systems, applications, and infrastructure to identify technology risks and evaluate their impact on business and financial reporting
Assess the design and operating effectiveness of IT controls related to access management, change management, system operations, and data integrity
Obtain and analyze system-generated data, configurations, and logs as a basis for evaluating control environments and identifying gaps
Demonstrate proficiency in developing IT control process flows, risk/control matrices, and testing strategies for general and automated application controls
Maintain the level of technical competency and professional care required for the completion of assignments in accordance with COSO, COBIT, and ISO auditing standards and related control techniques
Set priorities, ensuring daily coordination among the project team, and monitor progress against schedules, budgets, project/task deliverables and status reporting
Plan, review, and provide direction for the work of Staff and Senior Consultants
Communicate extensively with clients to drive expectations and report on the status of ongoing projects
Deliver oral and written presentations during and at the conclusion of projects by either recommending improvements or any operational/financial deficiencies to executive leadership
Stay abreast of emerging risk areas, IT trends, and related control techniques
Strengthen and maintain a network of industry contacts and establish new long-term relationships
About Riveron
Riveron is a financial consulting firm that provides services in the areas of accounting, finance, and operations. The company was founded in 2006 and is headquartered in Dallas, Texas. Riveron has additional offices in Atlanta, Chicago, Denver, Houston, Minneapolis, and Washington D.C. The company serves clients in a variety of industries, including healthcare, technology, manufacturing, and retail.
