Governance, Risk, and Compliance Associate - IT

Weaver; Philadelphia (Philadelphia County); On-site; USD 75,000 - 85,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Flexible time off

Job summary

Weaver is a full-service national accounting, advisory and consulting firm seeking a Governance, Risk, and Compliance Associate - IT to join the GRC practice. The IT Associate will execute audit procedures and support SOC 1 and SOC 2 examinations for clients across various industries and tech environments, gaining hands-on client experience and ongoing career development.

Responsibilities include testing IT general controls, communicating results, and preparing workpapers while adhering to firm

Qualifications

• Bachelor’s degree in MIS, Computer Science, Accounting, Business or related field.
• 0–2+ years of public accounting experience in SOC 1/2 examinations, IT audit, IT risk, internal audit, SOX ITGC testing or external audit support.
• Basic understanding of GAAP, GAAS, IIA standards.
• Team orientation and strong interpersonal skills.
• Ability to learn quickly and adapt to a fluid working environment.
• Willingness and ability to commute to Weaver’s New York City office generally once per week if based in Little Falls, NJ, or twice per month if based in Philadelphia, PA.

Responsibilities

• Support SOC 1 and SOC 2 (Type 1 and Type 2) examinations under the guidance of senior team members and in accordance with AICPA standards and firm methodology.
• Test the design and operating effectiveness of IT general controls, automated application controls, and key business process controls, including controls related to logical access, change management, system operations, job scheduling, backup and recovery, and incident management.
• Communicate engagement status, testing results, open items, and potential issues to supervisors on daily basis.
• Prepare clear, accurate, and complete workpapers that support testing results and conclusions and meet firm quality and documentation standards.
• Identify and document control exceptions and deficiencies, assess the related risks, and assist in developing practical remediation recommendations.
• Assist with preparing SOC reports and other client deliverables upon request.
• Apply sound judgment while complying with Weaver & Tidwell, LLP ‘s ethical requirements, including independence, objectivity, and client confidentiality.

Skills

Team orientation

Interpersonal skills

Adaptability

Quick learner

Education

Bachelor’s degree in MIS/CS/Accounting/Business

Tools

Excel

Word

PowerPoint

Job description

Governance, Risk, and Compliance Associate - IT

Weaver is a full-service national accounting, advisory and consulting firm with opportunities for professionals in many different fields. We seek to bring a human element to the world of accounting, which includes creating a diverse, collaborative, and entrepreneurial workplace culture. Our leaders truly care about the well-being of all our employees and encourage them to pursue their ambitions.

While our business is based in numbers, our success is truly based on people. It’s why we commit to supporting our people not just in their professional growth, but also in their ability to lead balanced, integrated lives. At the foundation of that commitment areour core values .Weaver’s core values were created specifically to empower our people to deliver extraordinary service and be their best selves. Our goal is to balance high development with high performance in order to meet the long-term goals of each individual, team, and our firm.

Learn more about our services, industry experience and culture atweaver.com .

Position Profile

Weaver’s Governance, Risk, and Compliance (GRC) practice is looking for an IT Associate to join their growing team! The GRC-IT Associate is responsible for execution of audit procedures and completion of engagement objectives. The associate will support system and organization controls (SOC 1 and SOC 2) examinations for clients across a variety of industries and technology environments. Through hands on client experience, structured mentorship, and ongoing career development, you will strengthen your existing capabilities, expand your technical and professional skills and take on increasing responsibility as you progress in your career. They will take ownership of small projects under the supervision of more experienced team members, while documenting and issuing reports. The GRC Associate is curious, enthusiastic, and demonstrates a willingness to learn on a continual basis. The ideal candidate will have the ability to establish trust with the client, and maintain good working relationships and communication with client personnel and teammates.

This position is primarily responsible for execution of various engagement objectives within assigned areas and assists where necessary to complete the overall engagement. This requires the ability to learn and understand information systems and related internal control theory and basic auditing concepts. The individual should have a basic understanding of the system development life cycle (design, development, testing, production and implementation) and various computing environments. This position should develop a basic understanding of IT general controls including security administration, program change management, and program development and computer operations.

Key Responsibilities:

• Support SOC 1 and SOC 2 (Type 1 and Type 2) examinations under the guidance of senior team members and in accordance with AICPA standards and firm methodology.
• Test the design and operating effectiveness of IT general controls, automated application controls, and key business process controls, including controls related to logical access, change management, system operations, job scheduling, backup and recovery, and incident management.
• Communicate engagement status, testing results, open items, and potential issues to supervisors on daily basis.
• Prepare clear, accurate, and complete workpapers that support testing results and conclusions and meet firm quality and documentation standards.
• Identify and document control exceptions and deficiencies, assess the related risks, and assist in developing practical remediation recommendations.
• Assist with preparing SOC reports and other client deliverables upon request.
• Apply sound judgment while complying with Weaver & Tidwell, LLP ‘s ethical requirements, including independence, objectivity, and client confidentiality.

To be successful in this role, the following qualifications are required:

• Bachelor’s degree in management information systems, Computer Science, Accounting, Business or related field
• 0-2+ years of public accounting experience in SOC 1 / SOC 2 examinations, IT audit, IT risk, internal audit, SOX ITGC testing or external audit support. Relevant industry and internship experience will be considered.
• Basic understanding of GAAP, GAAS, IIA standards
• Team orientation and strong interpersonal skills
• Ability to learn quickly and adapt to a fluid working environment
• Willingness and ability to commute to Weaver’s New York City office generally once per week if based in Little Falls, NJ, or twice per month if based in Philadelphia, PA.

Additionally, the following qualifications are preferred:

• Master’s degree in accounting, or related field is preferred
• CPA, CPA candidate, CIA or CIA candidate, CISA or CISA candidate (CISA preferred)
• Strong verbal and written communication skills, with the ability to translate between various technical and non-technical audiences
• Must have proficiency in Excel, Word, and PowerPoint and openness to learning audit and workflow platforms used by the firm
• Strong multi-tasking and project management skills
• Excellent critical thinking and attention to detail
• Exposure to information security frameworks such as ISO 27001, NIST, HITRUST or PCI DSS is a plus, but not required

Weaver Benefits

• At Weaver, our most valuable resource is our people. We take the time to evaluate our employees' wants and needs and invest our resources accordingly. Weaver offers competitive health benefits, such as medical, dental, vision, disability, life insurance, and a 401(k) plan.
• A reasonable estimate of the compensation range for this position is $75,000 to $85,000. Actual compensation will be based on a variety of factors including but not limited to experience, skills, certifications, and geographical location.
• In addition to compensation packages, Weaver offers competitive health benefits, such as medical, dental, vision, disability, life insurance, and a 401(k) plan. Further, we support our employees by offering flexible scheduled time off (STO), minimum of 56 hours of sick and safe leave, 11 holidays, and 2 scheduled recharge days! Learn more here - Weaver benefits .

We also offer in-house CPE and learning opportunities through our internal Learning & Development department. Our multi-faceted internal learning program including technical improvement, practice development, management/leadership training, and whole-life growth. Our goal is to balance both high development with high performance to meet the long-term goals of each individual, team, and our firm.

Annual Base Pay Range in New York: $75,000 - $85,000
Exact compensation may vary based on skills, experience, and location.

People are our formula! At Weaver, we recognize that everyone brings different strengths, backgrounds, and working styles to our team. We cultivate a safe and inclusive work environment that celebrates each individual’s unique qualities through visibility, progression, advocacy, and support. We are proudly an equal opportunity employer.

What’s next? Interested applicants should apply directly to the job posting. You may apply to multiple roles. Be sure to upload your most recent resume and ensure that it is attached to your application. By registering, you are only activating an account and creating a presence. Please apply directly to a position of interest. You will receive a confirmation email after completing an application for a role. After reviewing your application, a friendly Weaver Recruiter will contact you soon and walk you through the hiring process. Thank you for exploring a career with us. We look forward to meeting you!

Currently, we are not accepting resume submissions from third-party staffing agencies for this role.

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.