IT Risk Advisory Associate: SOC, Cyber & Internal Controls

Michael Silver & Company; Indianapolis (IN); Hybrid; USD 70,000 - 90,000; Full time

Benefits offered by this job

Hybrid work environment

Equal opportunity employer

Job summary

KSM is seeking an Associate in IT Risk Advisory Services to support SOC, cybersecurity, and internal audit engagements. You will assess IT controls, document findings, and collaborate with engagement teams to deliver high-quality client service.

A relevant degree and ongoing certification pursuit are expected, with hybrid work flexibility. You will coordinate with clients and colleagues to gather information, manage multiple projects, and meet deadlines while building knowledge of KSM service

Qualifications

• Bachelor's or master's degree in Information Systems or related field.
• Pursuit of professional certification such as CISA or CISSP encouraged.
• Internship or academic experience in IT, cybersecurity, audit or risk preferred.

Responsibilities

• Execute procedures for SOC 1, SOC 2, HITRUST and IT risk engagements.
• Evaluate IT, cybersecurity, and business process controls through testing.
• Review client documentation for completeness and accuracy.
• Prepare workpapers, document conclusions, and communicate findings.
• Support IT control testing for financial statement audits and risk assessments.

Skills

Analytical skills

Communication

Organization

Documentation

Problem-solving

Microsoft Excel

Microsoft Word

Outlook

Education

Bachelor's or master's degree in Information Systems / MIS / Business Technology & Analytics

Tools

Excel

Job description

KSM is seeking an Associate in IT Risk Advisory Services to support SOC, cybersecurity, and internal audit engagements. You will assess IT controls, document findings, and collaborate with engagement teams to deliver high-quality client service.

A relevant degree and ongoing certification pursuit are expected, with hybrid work flexibility. You will coordinate with clients and colleagues to gather information, manage multiple projects, and meet deadlines while building knowledge of KSM service