Director, Technology Risk Consulting - IT Audit

rsm; New York (NY); On-site; USD 180,000 - 280,000; Full time

Benefits offered by this job

Competitive benefits

Flexible work schedule

Job summary

RSM is seeking a Director to join our Risk Consulting Services in Technology Risk. You will advise leadership on technology, cybersecurity, compliance, and operational risks; lead client engagements; mentor teams; and drive business growth while delivering high-value solutions.

This role emphasizes building strong client relationships, strategic business development, and delivering impactful risk management with a balance between client service and career satisfaction.

Qualifications

• Bachelor's or master's degree in business, accounting, MIS, CS, or related discipline.
• Ten years of experience in information technology risk management, internal audit, public accounting, or consulting.
• Professional certifications such as CPA, CISA, CISSP, CISM, or CIPP are required.

Responsibilities

• Advise client leadership on design, enhancement, and optimization of technology and business process controls.
• Lead technology risk management, governance, compliance, and data security initiatives for clients.
• Oversee IT control design, testing, and improvement opportunities across ERP platforms.
• Direct SOC attestation and other third-party assurance engagements.
• Lead cybersecurity risk management consulting and assessment engagements.
• Identify and pursue new client opportunities and manage client engagements for profitability and quality.

Skills

IT risk management

Internal audit

Public accounting

Consulting

SOX

COSO

COBIT

HIPAA

PCI

GLBA

Education

Bachelor's or master's degree in business or related field

MIS / Computer science / related discipline

Tools

ERP systems (SAP, Oracle, JD Edwards, PeopleSoft)

Job description

We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, culture and talent experience and our ability to be compelling to our clients. You'll find an environment that inspires and empowers you to thrive both personally and professionally. There's no one like you and that's why there's nowhere like RSM.

About the Role

RSM has an exceptional career opportunity for a Director to join our Risk Consulting Services practice as part of our Technology Risk Consulting team. This leadership role offers the opportunity to help clients navigate complex technology risks, strengthen governance and controls, and drive business value through effective risk management.

As a Director, you will serve as a trusted advisor to middle market organizations and other complex enterprises, helping leadership teams address technology, cybersecurity, compliance, and operational risks. You will be responsible for leading client engagements, developing talent, cultivating business opportunities, and contributing to the continued growth of a dynamic and collaborative consulting practice.

This role is ideal for an experienced professional who enjoys building strong client relationships, mentoring teams, developing business, and delivering impactful solutions while maintaining a balanced and rewarding career.

What You'll Do

• Advise client leadership on the design, enhancement, and optimization of technology and business process controls.
• Serve as a trusted advisor on technology risk management, governance, compliance, and emerging technology risks.
• Lead teams in evaluating the design and operating effectiveness of information technology controls and identifying opportunities for improvement.
• Oversee IT-related support for financial statement audits, SOX compliance programs, and internal audit engagements.
• Lead the evaluation and testing of automated application controls and technology-enabled business processes across a variety of ERP platforms and software applications.
• Direct SOC attestation and other third-party assurance engagements.
• Lead cybersecurity risk management consulting and assessment engagements.
• Identify, pursue, and secure new client opportunities through relationship development and market-facing activities.
• Manage a diverse portfolio of client engagements while maintaining responsibility for profitability, quality, and risk management.
• Provide leadership on proposals, client pursuits, and strategic internal initiatives.
• Recruit, develop, mentor, and retain high-performing professionals while fostering an inclusive, collaborative team environment.

Minimum Required Qualifications

• Bachelor's or master's degree in business, accounting, management information systems (MIS), computer science, or a related discipline.
• Ten years of experience in information technology risk management, internal audit, public accounting, and/or consulting.
• One or more professional certifications required, such as:
• Certified Public Accountant (CPA)
• Certified Information Systems Auditor (CISA)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Information Privacy Professional (CIPP)

Preferred Qualifications

• Minimum of eight years of experience within a public accounting or professional services firm.
• Experience leading client engagements and managing managers and staff.
• Experience managing project financials and delivering engagements within established fees and budgets.
• Experience managing, mentoring, and developing professionals while balancing workloads and stakeholder expectations.
• Strong understanding of information technology controls and security concepts, including experience with widely used financial applications and ERP systems such as SAP, Oracle, JD Edwards, PeopleSoft, or similar platforms.
• Advanced knowledge of relevant regulations, frameworks, and standards, including SOX, AICPA SOC Reporting Standards, COSO, COBIT, FFIEC, ITIL, ISO 27001, PCI, HIPAA, and GLBA.
• Demonstrated ability to apply regulatory and control requirements within organizational control frameworks.
• Recent success developing new business opportunities and participating in market-facing activities.
• Exceptional interpersonal and relationship-building skills.
• Advanced written, verbal, and presentation skills, including experience interacting with executive and senior leadership teams.
• Ability to travel as needed to serve client needs (estimated 10% to 30%).

Benefits

• At RSM, we offer a competitive benefits and compensation package for all our people.
• We offer flexibility in your schedule, empowering you to balance life's demands, while also maintaining your ability to serve clients.

Learn more about our total rewards at https://rsmus.com/careers/working-at-rsm/benefits .