Associate - IT Risk Advisory Services

Michael Silver & Company; Indianapolis (IN); Hybrid; USD 70,000 - 90,000; Full time

Benefits offered by this job

Hybrid work environment

Equal opportunity employer

Job summary

KSM is seeking an Associate in IT Risk Advisory Services to support SOC, cybersecurity, and internal audit engagements. You will assess IT controls, document findings, and collaborate with engagement teams to deliver high-quality client service.

A relevant degree and ongoing certification pursuit are expected, with hybrid work flexibility. You will coordinate with clients and colleagues to gather information, manage multiple projects, and meet deadlines while building knowledge of KSM service

Qualifications

• Bachelor's or master's degree in Information Systems or related field.
• Pursuit of professional certification such as CISA or CISSP encouraged.
• Internship or academic experience in IT, cybersecurity, audit or risk preferred.

Responsibilities

• Execute procedures for SOC 1, SOC 2, HITRUST and IT risk engagements.
• Evaluate IT, cybersecurity, and business process controls through testing.
• Review client documentation for completeness and accuracy.
• Prepare workpapers, document conclusions, and communicate findings.
• Support IT control testing for financial statement audits and risk assessments.

Skills

Analytical skills

Communication

Organization

Documentation

Problem-solving

Microsoft Excel

Microsoft Word

Outlook

Education

Bachelor's or master's degree in Information Systems / MIS / Business Technology & Analytics

Tools

Excel

Job description

Job Description:We’re KSM, one of the top 50 largest independent advisory, tax, and audit firms in the United States. But more than our size, it’s our people and culture that set us apart. We believe great things happen when people are supported, challenged, and given the freedom to do their very best work. That’s why we’ve built a workplace where your career and personal life can thrive together – where you have the flexibility to manage your time, the resources to grow, and a team that genuinely cares about your success.We’ve been employee-owned since 2001, giving every team member a stake in our collective success. This ownership mentality fosters a culture of collaboration, curiosity, and excellence – where new ideas are welcomed, different perspectives are valued, and you’re encouraged to explore what excites you most. Whether you’re expanding your skills, tackling new challenges, or making an impact beyond the office, we provide the resources and support to help you grow in the direction that’s right for you.At KSM, your contributions matter – not just to the firm, but to your colleagues, clients, and the communities we serve across the U.S. If you’re looking for a place where you can do meaningful work, build lasting relationships, and grow in ways that align with what’s most important to you, we’d love to meet you.Position Summary:The Associate, IT Risk Advisory Services supports the delivery of IT risk advisory, attestation, internal audit, financial statement audit support, and consulting engagements. This role evaluates client processes, technology, risks, and internal controls while working under the guidance of experienced team members. The Associate contributes to high-quality client service through accurate execution, professional judgment, collaboration, and continuous technical development.Responsibilities:Execute assigned procedures for SOC 1, SOC 2, HITRUST, internal audit, cybersecurity, financial statement audit support, and other IT risk advisory engagements.Evaluate IT, cybersecurity, and business process controls through testing and documentation.Assess client documentation and supporting evidence for completeness, accuracy, and compliance.Prepare clear workpapers, document conclusions, and communicate findings to engagement teams.Support financial audit teams through IT control testing and risk assessments.Coordinate with clients and internal teams to gather information and meet engagement deadlines.Manage multiple assignments while maintaining quality and attention to detail.Build knowledge of KSM service offerings and contribute to a collaborative team environment.Requirements/Qualifications:Bachelor's or master's degree from a business school, with a major or concentration in Information Systems, Management Information Systems, Business Technology & Analytics, or a closely related information systems field.Commitment to pursue a professional certification such as CISA, CISSP, or another relevant credential.Internship or academic experience in IT, cybersecurity, audit, compliance, risk management, or internal controls preferred.Strong analytical, communication, organization, documentation, and problem-solving skills.Proficiency with Microsoft Office applications (Excel, Word, Outlook), including comfort building and navigating Excel formulas and spreadsheets, paired with strong personal organizational habits for managing workpapers, documentation, and deadlines across multiple engagements.Ability to work in a hybrid environment and manage multiple priorities.We are an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, color, sex, sexual orientation, gender identity, disability, genetic information, national origin, race, religion, veteran status, or any other protected category.KSM only accepts resumes directly submitted by a candidate and referrals submitted by current KSM employees. Unsolicited resumes or candidate profiles sent by staffing agencies and fee-based referral services will not be considered outside of a signed KSM vendor contract. KSM will not pay a fee to recruiters or agencies that do not have a signed KSM vendor contract.