Assurance Senior - IT Risk Audit Team

Bpmcpa; United States; Hybrid; USD 85,000 - 100,000; Full time

Benefits offered by this job

Total rewards package

Well-being resources

Balance & flexibility

Professional development

Job summary

BPM is seeking a Risk Assurance Senior to lead ITGC/ITAC testing for SOX engagements and support SOC 1/2 audits. You will collaborate with managers and clients, deliver high-quality work, and mentor junior team members while advancing assurance practices.

The role emphasizes strong analytical and communication skills, with opportunities for professional development and participation in flexible work arrangements and benefits.

Qualifications

• 2–5 years of IT audits, SOC examinations, SOX compliance, or risk assurance engagements in public accounting or consulting.
• Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP) and/or CPA license are preferred.
• Strong understanding of SOC 1, SOC 2, and SOX frameworks, including ITGCs, ITACs, automated controls, business process controls, and third-party risk considerations.
• Experience with ERP systems, cloud environments (Azure, AWS, GCP), and cybersecurity concepts is preferred.
• Excellent analytical, problem-solving, and critical-thinking skills.
• Strong verbal and written communication skills with the ability to interact effectively with client management and engagement teams.
• Ability to synthesize research into clear, thoughtful, and actionable deliverables.

Responsibilities

• Lead and perform IT General Controls (ITGC), IT Application Controls (ITAC), and automated controls testing for SOX compliance engagements.
• Perform audit activities, including walkthroughs through report preparation, for SOC 1 and SOC 2 engagements and SOX compliance, ensuring timely deliverables.
• Prepare and review workpapers, testing documentation, narratives, flowcharts, and risk and control matrices (RCMs).
• Perform testing and review and provide technical expertise to clients and engagement team members.
• Mentor, coach, and review the work of Associates and interns, providing constructive feedback and guidance.
• Contribute to practice development initiatives, including methodology enhancements, training, and recruiting.

Skills

IT risk & controls

SOX & SOC

Mentoring junior staff

Client communication

ERP & cloud environments

Education

Bachelor's degree in Information Systems, Accounting, Computer Science, or related field

Tools

ERP systems

Cloud environments (Azure, AWS, GCP)

Job description

BPM – where caring and community is in our company DNA; we are always striving to be our best selves; and we’re compelled to ask the questions that lead to innovation.

As a Risk Assurance Senior, you will play a key role in executing and coordinating assurance engagements, supporting clients through complex business and IT risk and compliance initiatives, and mentoring junior team members. You will work closely with managers and client personnel to deliver high-quality solutions across SOX, SOC and IT audit engagements.

Working with BPM means using your experiences, broadening your skills, and reaching your full potential in work and life—while also making a positive difference for your clients, colleagues, and communities. Our shared entrepreneurial spirit drives us to see and do things differently. Our passion for people makes BPM a place where everyone feels welcome, valued, and part of something bigger. Because People Matter.

What you get

• Total rewards package:from flexible work arrangements to personalized benefit structures and financial compensation options that give you choice and flexibility.
• Well-being resources:interactive wellness platform and incentives, an employee assistance program and mental health resources, and Colleague Resource Groups (CRGs) that provide safe spaces for colleagues to share, be heard, feel valued and deepen connections.
• Balance & flexibility:14 Firm Holidays including 2 floating, Flex PTO, paid family leave, winter break, summer hours, and remote work options, so you can balance challenging yourself with taking care of yourself.
• Professional development opportunities:A learning culture withCPA exam resources and bonuses, tuition reimbursement, a coach program, and live classes, workshops, and seminars through BPM University.

Who is successful at BPM

• Caring people who put others first
• Self-starters who embody the BPM entrepreneurial spirit
• Authentic individuals with a diverse point of view
• Lifelong learners with a drive to excel

• Lead and perform IT General Controls (ITGC), IT Application Controls (ITAC), and automated controls testing for SOX compliance engagements.
• Perform audit activities, including walkthroughs through report preparation, for SOC 1 and SOC 2 engagements and SOX compliance, ensuring timely deliverables.
• Prepare and review workpapers, testing documentation, narratives, flowcharts, and risk and control matrices (RCMs).
• Perform testing and review and provide technical expertise to clients and engagement team members.
• Mentor, coach, and review the work of Associates and interns, providing constructive feedback and guidance.
• Contribute to practice development initiatives, including methodology enhancements, training, and recruiting.

• Bachelor's degree in Information Systems, Accounting, Computer Science, or a related field.
• 2–5 years of experience performing IT audits, SOC examinations, SOX compliance, or risk assurance engagements in public accounting or consulting.
• Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP) and/or CPA license are preferred.
• Strong understanding of SOC 1, SOC 2, and SOX frameworks, including ITGCs, ITACs, automated controls, business process controls, and third-party risk considerations.
• Experience with ERP systems, cloud environments (Azure, AWS, GCP), and cybersecurity concepts is preferred.
• Ability to independently manage multiple assignments and prioritize competing deadlines.
• Excellent analytical, problem-solving, and critical-thinking skills.
• Strong verbal and written communication skills with the ability to interact effectively with client management and engagement teams.
• Ability to synthesize research into clear, thoughtful, and actionable deliverables.

$85,000-$100,000/year

The salary range provided is intended for candidates in the San Francisco Bay Area who meet the minimum requirements of the position. Candidates who do not reside in the San Francisco Area, do not meet the minimum requirements, or exceed the requirements are encouraged to apply and a recruiter will provide you with a range specific to your location and qualifications.

Wondering if you should apply?

At BPM we are people who value people. We are progressive and purposeful. We are a firm with flexibility. Our shared entrepreneurial spirit drives us to see and do things differently. And our passion for people makes BPM a place where everyone feels welcome, valued, and part of something bigger.

***************

BPM provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. BPM welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in all aspects of the selection process.

For positions based in San Francisco, consideration of qualified candidates with arrest and conviction records will be in a manner consistent with the San Francisco Fair Chance Ordinance.

Please note - this posting is for prospective candidates only. Unsolicited third-party resume submissions will be considered property of BPM and will not be acknowledged or returned.