Remote IT Risk & Assurance Senior - SOX/SOC Lead

Bpmcpa; San Francisco (CA); On-site; USD 85,000 - 100,000; Full time

Benefits offered by this job

Total rewards package

Well-being resources

Flexibility & holidays

Professional development

Job summary

BPM is seeking a Risk Assurance Senior to coordinate assurance engagements, support clients through IT risk and compliance initiatives, and mentor junior staff. The role focuses on ITGC, ITAC, SOC 1/2, and SOX engagements, with emphasis on delivering high-quality audit solutions.

The ideal candidate has 2–5 years of IT audit experience, holds relevant certifications (CISA/CISSP/CPA preferred), and can manage multiple assignments while communicating effectively with clients and teams.

Qualifications

• Bachelor's degree in Information Systems, Accounting, Computer Science, or related field.
• 2–5 years of IT audits, SOC examinations, SOX compliance, or risk assurance engagements.
• CISA, CISSP and/or CPA preferred.
• Strong understanding of SOC 1, SOC 2, and SOX frameworks, including ITGCs, ITACs, automated controls, business process controls, and third-party risk considerations.
• Experience with ERP systems and cloud environments (Azure, AWS, GCP) preferred.

Responsibilities

• Lead and perform IT General Controls (ITGC), IT Application Controls (ITAC), and automated controls testing for SOX engagements.
• Perform audit activities, including walkthroughs through report preparation, for SOC 1 and SOC 2 engagements and SOX compliance, ensuring timely deliverables.
• Prepare and review workpapers, testing documentation, narratives, flowcharts, and risk and control matrices (RCMs).
• Perform testing and review and provide technical expertise to clients and engagement team members.
• Mentor, coach, and review the work of Associates and interns, providing constructive feedback and guidance.
• Contribute to practice development initiatives, including methodology enhancements, training, and recruiting.

Skills

IT audits

SOX/compliance

SOC 1/SOC 2

Analytical thinking

Communication skills

Leadership/mentoring

Education

Bachelor's degree in Information Systems, Accounting, Computer Science, or related field

Tools

ERP systems

Cloud environments (Azure, AWS, GCP)

Job description

BPM is seeking a Risk Assurance Senior to coordinate assurance engagements, support clients through IT risk and compliance initiatives, and mentor junior staff. The role focuses on ITGC, ITAC, SOC 1/2, and SOX engagements, with emphasis on delivering high-quality audit solutions.

The ideal candidate has 2–5 years of IT audit experience, holds relevant certifications (CISA/CISSP/CPA preferred), and can manage multiple assignments while communicating effectively with clients and teams.