Advisory Senior Associate

Frazier & Deeter; Nashville (TN); On-site; USD 90,000 - 140,000; Full time

Job summary

Frazier & Deeter is hiring an Advisory Senior Associate to lead day‑to‑day execution of SOC examinations, IT internal audits, and IT risk assessments for clients across various industries. You will evaluate IT controls, governance, and security practices, and help communicate findings to client stakeholders.

Ideal candidates have 3+ years in information security or IT audit, a relevant accounting/ MIS background, and professional certifications like CISA, CPA, CISSP, or CIA.

Qualifications

• 3+ years of Information Security or Information Technology experience required.
• Bachelor’s degree in Accounting, Finance, MIS, or related field required.
• CISA candidate or CPA, CISSP, CIA, etc. considered.
• Experience with SOC 1/SOC 2, SOX, PCAOB standards is preferred.
• Familiarity with COBIT, NIST, ISO 27000, PCI, HIPAA and AICPA trust services criteria.

Responsibilities

• Lead day‑to‑day execution of advisory engagements, including SOC examinations and IT internal audits.
• Perform testing and evaluation of ITGCs, application controls, cybersecurity controls, and processes.
• Assess client environments against COBIT, NIST, ISO 27000, PCI, HIPAA, and AICPA criteria.
• Support SOX compliance efforts with walkthroughs and control design assessments.
• Prepare workpapers and client deliverables communicating findings and risks.

Skills

SOC examinations

IT internal audits

IT risk assessment

Information security reviews

COBIT framework

Education

Bachelor's degree in Accounting

MIS or related field

CISA candidate or CPA/CISSP/CIA

Tools

COBIT

NIST

ISO 27000

PCI

AICPA trust services criteria

Job description

Join Frazier & Deeter and be a part of a rapidly growing Top 50 accounting & advisory firm that has been repeatedly named a Best Firm to Work For, a Best Firm for Women and a Pacesetter firm among U.S. accounting firms. With several offices across the U.S., UK, and India, there is a spot for you!

We serve clients of all sizes across the United States and the globe, with a suite of services that grow every year. Our growth mindset and entrepreneurial environment translates into variety and opportunity for our people.

At Frazier & Deeter, we’re committed to training, mentoring, and developing our staff members. With our emphasis on Investing in Relationships to Make a Difference and a Firmwide Focus on Inclusion, we help each other grow in every aspect of life.

Job Summary:

The Advisory Senior Associate will be responsible for leading the day-to-day execution and delivery of a range of projects focused on SOC examinations and reporting, IT internal audit and advisory, IT governance and risk assessment, system implementation reviews, Sarbanes-Oxley compliance, PCI, and information security. The Advisory practice is well-positioned to pace the overall growth of the Firm due to our unique positioning in the marketplace and overall demand for our services. We are seeking self-motivated and qualified candidates with a passion for quality client service to join our growing team.

Duties & Responsibilities:

• Lead day‑to‑day execution of advisory engagements, including SOC 1/SOC 2 examinations, IT internal audits, IT risk assessments, and information security reviews.
• Perform detailed testing and evaluation of IT general controls (ITGCs), application controls, cybersecurity controls, and operational processes.
• Assess client environments against industry frameworks such as COBIT, NIST, ISO 27000, PCI, HIPAA, and AICPA trust services criteria.
• Support Sarbanes‑Oxley (SOX) compliance efforts, including walkthroughs, control design assessments, and testing in accordance with PCAOB standards.
• Evaluate system implementation projects to ensure appropriate controls, governance, and risk mitigation practices are in place.
• Prepare high‑quality workpapers, audit documentation, and client deliverables that clearly communicate findings, risks, and recommendations.
• Collaborate with client stakeholders, external auditors, and internal teams to clarify expectations, resolve issues, and ensure timely engagement delivery.
• Identify control gaps, process inefficiencies, and improvement opportunities; develop practical, value‑added recommendations.
• Assist in drafting SOC reports, risk assessment summaries, audit reports, and executive‑level presentations.
• Mentor, train, and review work of staff associates to support their professional development.
• Contribute to engagement planning, scoping, and risk assessment activities.
• Maintain strong working knowledge of emerging technologies, regulatory trends, and industry best practices.
• Manage multiple projects simultaneously while meeting deadlines and maintaining high‑quality standards.

Education & Experience:

• 3+ years of Information Security or Information Technology experience required
• Bachelor’s degree in Accounting, Finance, Management Information Systems(MIS), or related field required
• CISA candidate, other certifications accepted (CPA, CISSP, CIA, etc.)
• Demonstrated success in a client service role, preferably with Big 4 or national advisory firm
• Familiarity with variety of technologies, operating systems, databases, and reporting and data analytics tools
• Ability to interact with external auditors and members of management to deliver expectations and communicate and interpret key audit priorities and issues, including PCAOB and AICPA trends
• Exceptional organizational skills with capability to present to Board / C-suite audience
• Strong written and verbal communication skills
• Experience related to the following areas:
• SSAE 18 / SOC 1 / SOC 2
• Sarbanes-Oxley and PCAOB requirements
• IT risk assessment / operational IT audit
• COBIT framework
• PCI
• Information security / cyber frameworks (ISO 27000, NIST, AICPA, etc.)
• HIPAA
• Business acumen, ability to anticipate and elevate issues
• Working knowledge of basic financial accounting, auditing and financial reporting concepts
• Teaching and staff development
• Ability and appetite to invest into relationships
• Exemplify a positive attitude and strong work ethic with a commitment to teamwork and professionalism.