Manager, Risk and Compliance

RSM US LLP; Denver (CO); Hybrid; USD 111,000 - 190,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

RSM US LLP is seeking a Manager of Risk & Compliance within Assurance Digital to execute certification activities, support risk assessments, and maintain evidence for release readiness. You will work closely with product, engineering, and delivery teams, escalating complex issues to leadership as needed.

The role emphasizes producing high-quality artifacts, maintaining logs, and supporting governance forums.

Qualifications

• Degree required: Bachelor's in accounting, information systems, business, or computer science.
• 5+ years of experience in risk and compliance.
• CPA, CISA, CRISC, AIGP, AAIR, AAISM or similar certifications preferred.

Responsibilities

• Execute certification activities for products and platforms; prepare artifacts and evidence.
• Support risk assessments for new products and changes; document risks and mitigations.
• Create and maintain documentation and evidence; ensure accuracy and inspection readiness.
• Coordinate with product, engineering, and delivery teams; be the day-to-day Risk & Compliance contact.

Skills

Privacy impact assessments

SOC 1/SOC 2

Cloud environments

Data governance / AI governance

Audit workflows

IT control frameworks

Cross-functional collaboration

Education

Bachelor's degree (accounting, IS, business, CS)

CPA / CISA / CRISC / others (preferred)

Job description

We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, culture and talent experience and our ability to be compelling to our clients. You'll find an environment that inspires and empowers you to thrive both personally and professionally. There's no one like you and that's why there's nowhere like RSM.

Assurance Digital delivers the technology that enables high quality external assurance engagements across the U.S. and the global network. The Manager of Risk & Compliance supports Assurance Digital by executing certification and compliance activities for products and platforms under established standards and guidance. This role is responsible for preparing certification artifacts, supporting risk assessments, collecting and validating evidence, and ensuring release readiness. Working closely with product, engineering, and delivery teams, the Manager provides hands on risk and compliance support and helps address issues as they arise. The role focuses on producing high quality, inspection ready documentation, and escalating complex matters to senior leaders as needed.

ESSENTIAL DUTIES:

• Certification Execution and Release Support - Execute certification activities for Assurance Digital products and platforms under established standards and guidance. Prepare certification artifacts, including procedures performed, evidence collection, conclusions, and draft release recommendations. Support pre release readiness and post release follow up activities.
  
• Risk Assessment Support and Issue Management - Support risk assessments for new products, enhancements, and material changes, including documenting risks and proposed mitigations. Track risk treatment actions and remediation items through completion, escalating issues as needed.
  
• Documentation, Evidence, and Quality Control - Produce and maintain required documentation and evidence in accordance with defined templates and minimum standards. Perform quality checks on evidence and certification materials to ensure completeness, accuracy, and inspection readiness. Maintain certification records, findings logs, and evidence repositories.
  
• Stakeholder Coordination and Day to Day Advisory - Partner with product, engineering, and delivery teams to gather inputs, clarify requirements, and support compliance activities. Serve as a day to day Risk & Compliance contact for assigned initiatives, escalating complex issues to Associate Directors or Directors.
  
• Governance and Reporting Support - Support compliance governance forums through preparation of materials, status reporting, action tracking, and follow ups. Assist with audit, inspection, peer review, and internal oversight requests.
  
• Other duties as assigned

QUALIFICATIONS:

EDUCATION/CERTIFICATIONS

• Degree: Bachelor's degree in accounting, Information Systems, Business, Computer Science, or related field - required
• Years of experience: 5+ - required
• Certification: CPA, CISA, CRISC, AIGP, AAIR, AAISM or similar - preferred

TECHNICAL/SOFT SKILLS

• Experience with privacy/data protection impact assessments and related process and security controls concepts.
• Familiarity supporting SOC 1/SOC 2 reporting concepts.
• Exposure to cloud environments (Azure/AWS/GCP) and related control considerations.
• Exposure to data and AI governance, model risk management frameworks, or emerging technology compliance

EXPERIENCE

• Knowledge of external audit workflows and the importance of audit quality, documentation, and evidence.
• Experience working with IT control frameworks (e.g., COSO, COBIT, ITIL) and common technology risk concepts.
• Experience partnering with product or technology teams to clarify requirements, obtain evidence, and drive follow-through on remediation actions

At RSM, we offer a competitive benefits and compensation package for all our people.Learn more about our total rewards at https://rsmus.com/careers/working-at-rsm/benefits.

We believe flexibility and in-person connection both play an important role in how we work and grow. Most roles at RSM follow a hybrid workstyle, which means team members are aligned to an RSM office and come together in person when it best supports clients, teams, development or relationship-building. Some roles may be virtual or primarily on-site based on role requirements, team priorities and client needs.

All applicants will receive consideration for employment as RSM does not tolerate discrimination and/or harassment based on race; color; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender; sexual orientation; HIV Status; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the US uniformed service; US Military/Veteran status; pre-disposing genetic characteristics or any other characteristic protected under applicable federal, state or local law.

Accommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/partnership.RSM is committed to providing equal opportunity and reasonable accommodation for people with disabilities. If you require a reasonable accommodation to complete an application, interview, or otherwise participate in the recruiting process, please call us at 800-274-3978 or send us an email at [e-mail].

RSM does not intend to hire entry level candidates who will require sponsorship now OR in the future (i.e. F-1 visa holders). If you are a recent U.S. college / university graduate possessing 1-2 years of progressive and relevant work experience in a same or similar role to the one for which you are applying, excluding internships, you may be eligible for hire as an experienced associate.

RSM will consider for employment qualified applicants with arrest or conviction records. For those living in California or applying to a position in California, please click here for additional information.

At RSM, an employee's pay at any point in their career is intended to reflect their experiences, performance, and skills for their current role. The salary range (or starting rate for interns and associates) for this role represents numerous factors considered in the hiring decisions including, but not limited to, education, skills, work experience, certifications, location, etc. As such, pay for the successful candidate(s) could fall anywhere within the stated range.

Compensation Range: $111,200 - $190,300

Individuals selected for this role will be eligible for a discretionary bonus based on firm and individual performance.