[Hiring] Risk Advisory - IT Risk Senior Associate @Riveron

Role Description

In today’s dynamic environment, business leaders face constantly shifting risks. Riveron helps organizations implement leading governance, risk and compliance practices by combining deep expertise with pragmatic partnership, using a hands-on approach to understand the specific needs of the organization and create tailored solutions to address key compliance risks.

Our Risk Advisory services include:

• SOX readiness
• Managed internal controls testing and monitoring
• Co-sourced/outsourced internal audit
• Segregation of duties and access risk review
• Policy and procedure development
• Enterprise risk management
• IT and cybersecurity risk assessment

The Senior Associate level position for Riveron’s IT Risk Advisory group will work collaboratively with senior team members who provide guidance, coaching, and direction. The role includes:

• Assessing the design and operating effectiveness of IT General Controls (ITGC)
• Developing and executing remediation roadmaps
• Performing IT risk assessments

Qualifications

• Bachelor's and/or Master’s degree in Accounting, Finance, Management Information Systems, or another relevant field
• Relevant certification preferred, such as CISA, CISSP, CISM, CGEIT, or CIPP; CPA or CIA is also valued but not required
• 3+ years of experience working as IT auditor or IT risk advisor for a public accounting firm
• Demonstrated knowledge of IT risk management, general and application controls, cybersecurity principles, and regulatory frameworks such as SOX, NIST, or ISO
• Passion for developing and maintaining client relationships
• Ability to communicate skillfully with a variety of audiences
• Thrives in an ever-changing, dynamic work environment
• Ability to identify problems and instinctively look for solutions
• Enjoys participating in internal and external company initiatives
• Ability and desire to travel as required based on client location

Requirements

• Gain an understanding of the assigned clients’ objectives as well as their regulatory and risk management environment
• Assist projects in the areas of IT General Control Assessments, Sarbanes-Oxley Compliance, and potentially Cybersecurity Engagements
• Utilize existing knowledge of client’s industry and IT environment to identify technological developments to evaluate impacts on the client’s business
• Assess internal controls’ design adequacy to mitigate financial, operational, and compliance risks
• Obtain and analyze data as a basis for reviewing the adequacy, effectiveness, and efficiency of systems and processes
• Exhibit proficiency with creating internal controls process flows and risk/control matrices
• Maintain the level of technical competency and professional care required for the completion of assignments in accordance with COSO, COBIT, and ISO auditing standards
• Set priorities, ensuring daily coordination among the project team, and monitor progress against schedules, budgets, project/task deliverables and status reporting
• Plan, review, and provide direction for the work of Staff and Senior Consultants
• Communicate extensively with clients to drive expectations and report on the status of ongoing projects
• Deliver oral and written presentations during and at the conclusion of projects
• Stay abreast of emerging risk areas, IT trends, and related control techniques

Benefits

• Full range of benefits including medical, dental, and vision insurance
• 401(k) with company match
• PTO