Full Job Description
As a Risk Assurance Senior, you will play a key role in executing and coordinating assurance engagements, supporting clients through complex business and IT risk and compliance initiatives, and mentoring junior team members. You will work closely with managers and client personnel to deliver high-quality solutions across SOX, SOC and IT audit engagements.
Responsibilities:
• Lead and perform IT General Controls (ITGC), IT Application Controls (ITAC), and automated controls testing for SOX compliance engagements.
• Perform audit activities, including walkthroughs through report preparation, for SOC 1 and SOC 2 engagements and SOX compliance, ensuring timely deliverables.
• Prepare and review workpapers, testing documentation, narratives, flowcharts, and risk and control matrices (RCMs).
• Perform testing and review and provide technical expertise to clients and engagement team members.
• Mentor, coach, and review the work of Associates and interns, providing constructive feedback and guidance.
• Contribute to practice development initiatives, including methodology enhancements, training, and recruiting.
Requirements:
• Bachelor's degree in Information Systems, Accounting, Computer Science, or a related field.
• 2-5 years of experience performing IT audits, SOC examinations, SOX compliance, or risk assurance engagements in public accounting or consulting.
• Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP) and/or CPA license are preferred.
• Strong understanding of SOC 1, SOC 2, and SOX frameworks, including ITGCs, ITACs, automated controls, business process controls, and third-party risk considerations.
• Experience with ERP systems, cloud environments (Azure, AWS, GCP), and cybersecurity concepts is preferred.
• Ability to independently manage multiple assignments and prioritize competing deadlines.
• Excellent analytical, problem-solving, and critical-thinking skills.
• Strong verbal and written communication skills with the ability to interact effectively with client management and engagement teams.
• Ability to synthesize research into clear, thoughtful, and actionable deliverables.