IT Risk Senior Associate

Jobtailor; Atlanta (GA); On-site; USD 90,000 - 120,000; Full time

Job summary

Jobtailor seeks an IT Auditor to help clients navigate regulatory and risk management environments, performing ITGC assessments, SOX compliance work, and cybersecurity engagements. You will analyze data, assess controls, and develop risk matrices while mentoring staff on engagements.

You will build client relationships, communicate clearly, and stay current with evolving IT risk trends, all while traveling as needed to client sites and leading project workstreams.

Qualifications

• Bachelor's or Master's degree in a relevant field is required.
• Relevant certifications such as CISA, CISSP, CISM, CGEIT, or CIPP are preferred.
• 3+ years of IT audit or IT risk advisory experience in public accounting.
• Knowledge of IT risk management, controls, cybersecurity, and SOX/NIST/ISO.
• Strong client relationships and communication skills; travel as needed.

Responsibilities

• Understand client objectives and regulatory/risk environments.
• Assist IT General Control Assessments, SOX compliance, and cybersecurity engagements.
• Evaluate IT environment and industry impacts on client businesses.
• Assess design adequacy of internal controls and test operating effectiveness.
• Analyze data to review systems' adequacy, effectiveness, and efficiency.
• Create internal controls process flows and risk/control matrices.
• Maintain technical competency per COSO, COBIT, ISO standards.
• Plan, mentor staff and senior consultants; manage priorities and deliverables.
• Communicate with clients; report status and present findings to leadership.

Skills

IT auditing

IT risk assessment

Regulatory frameworks

Data analysis

Communication skills

Travel readiness

Education

Bachelor's or Master’s in Accounting/Finance/MIS

Certifications preferred (CISA/CISSP/CISM/CGEIT/CIPP)

CPA or CIA valued

Tools

COSO framework

COBIT

ISO auditing standards

Job description

Responsibilities

• Gain an understanding of the assigned clients’ objectives as well as their regulatory and risk management environment
• Assist projects in the areas of IT General Control Assessments, Sarbanes‑Oxley Compliance, and potentially Cybersecurity Engagements
• Utilize existing knowledge of client’s industry and IT environment to identify technological developments to evaluate impacts on the client’s business
• Assess internal controls’ design adequacy to mitigate financial, operational, and compliance risks and to test their operating effectiveness
• Obtain and analyze data as a basis for reviewing the adequacy, effectiveness, and efficiency of systems and processes
• Exhibit proficiency with creating internal controls process flows and risk/control matrices
• Maintain the level of technical competency and professional care required for the completion of assignments in accordance with COSO, COBIT, and ISO auditing standards and related control techniques
• Set priorities, ensuring daily coordination among the project team, and monitor progress against schedules, budgets, project/task deliverables and status reporting
• Plan, review, and provide direction for the work of Staff and Senior Consultants
• Communicate extensively with clients to drive expectations and report on the status of ongoing projects
• Deliver oral and written presentations during and at the conclusion of projects by either recommending improvements or any operational/financial deficiencies to executive leadership
• Stay abreast of emerging risk areas, IT trends, and related control techniques

Requirements

• Bachelor's and/or Master’s degree in Accounting, Finance, Management Information Systems, or another relevant field
• Relevant certification preferred, such as CISA, CISSP, CISM, CGEIT, or CIPP; CPA or CIA is also valued but not required
• 3+ years of experience working as IT auditor or IT risk advisor for a public accounting firm. Experience should include performing internal or external IT audits
• Demonstrated knowledge of IT risk management, general and application controls, cybersecurity principles, and regulatory frameworks such as SOX, NIST, or ISO
• You have a passion for developing and maintaining client relationships
• You get the job done and have fun doing it
• You communicate skillfully with a variety of audiences and can create compelling stories from data
• You thrive in an ever-changing, dynamic work environment
• You readily identify problems and instinctively look for solutions
• You enjoy participating in internal and external company initiatives such as community service, training, recruiting, and firm events
• You have the ability and desire to travel as required based on client location