Advisory Senior Associate: IT Risk & SOX Examinations

Frazier & Deeter; Atlanta (GA); On-site; USD 90,000 - 130,000; Full time

Job summary

Frazier & Deeter seeks an Advisory Senior Associate to lead SOC examinations, IT internal audits, and IT risk assessments. You will assess controls against COBIT, NIST, ISO 27000, PCI, HIPAA, and AICPA criteria, and support SOX compliance with PCAOB standards.

The role emphasizes mentoring staff, managing multiple projects, and delivering high-quality client deliverables while staying current on regulatory trends and industry best practices.

Qualifications

• 3+ years of Information Security or Information Technology experience required.
• Familiarity with multiple technologies, operating systems, databases and analytics tools.
• CISA candidate, CPA, CISSP, CIA, or equivalent certifications encouraged.

Responsibilities

• Lead day-to-day execution of advisory engagements including SOC 1/2 examinations and IT audits.
• Conduct IT risk assessments and information security reviews with strong documentation.
• Evaluate controls against COBIT, NIST, ISO 27000, PCI, HIPAA, and AICPA criteria.
• Support SOX compliance efforts with walkthroughs and testing under PCAOB standards.
• Draft SOC reports and risk summaries, communicate findings to clients and management.
• Mentor staff and participate in engagement planning and risk assessment.

Skills

Information Security

Information Technology

Client service

Big 4 experience

Audit knowledge

Regulatory awareness

Risk assessment

Education

Bachelor’s degree in Accounting, Finance, MIS, or related field

Tools

COBIT

NIST

ISO 27000

PCI

AICPA Trust Services Criteria

Job description

Frazier & Deeter seeks an Advisory Senior Associate to lead SOC examinations, IT internal audits, and IT risk assessments. You will assess controls against COBIT, NIST, ISO 27000, PCI, HIPAA, and AICPA criteria, and support SOX compliance with PCAOB standards.

The role emphasizes mentoring staff, managing multiple projects, and delivering high-quality client deliverables while staying current on regulatory trends and industry best practices.