Risk Advisory - IT Risk Associate Director

Apply; Atlanta, Northern (GA, KY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Riveron is seeking an Associate Director for its IT Risk Advisory group in Atlanta. You will lead day‑to‑day project activities, manage staff and mentor consultants, and drive ITGC, SOX IT compliance, ERP/control reviews, and cybersecurity risk assessments.

A strong background in IT risk management and regulatory frameworks is essential. You will cultivate client relationships, communicate complex data stories effectively, and thrive in a dynamic, travel‑based consulting environment with

Qualifications

• Minimum 8 years as IT auditor or IT risk advisor for a public accounting firm or equivalent
• Knowledge of IT risk management, general and application controls, cybersecurity principles, and regulatory frameworks (SOX, NIST, ISO)
• Strong client relationship development and communication skills
• Ability to work in a dynamic environment and adapt to changing priorities
• Willingness to travel as required based on client location

Responsibilities

• Understand clients’ business objectives, IT environment and risk landscape
• Lead ITGC assessments, SOX IT compliance, ERP/app control reviews, cybersecurity risk assessments
• Evaluate IT controls related to access, change, operations, and data integrity
• Analyze system data, logs and configurations to identify control gaps
• Develop IT control process flows, risk/control matrices and testing strategies
• Maintain technical competency per COSO, COBIT and ISO standards
• Coordinate with project teams and manage staff directions
• Communicate project status and deliverables to clients and leadership
• Present improvements and deficiencies to executive leadership

Skills

Communication

Client relationships

Travel willingness

Education

Bachelor's/Master's in Accounting/Finance/MIS

Certifications: CISA/CISSP/CISM/CGEIT/CIPP (CPA valued)

Job description

In today’s dynamic environment, business leaders face constantly shifting risks. Riveron helps organizations implement leading governance, risk and compliance practices by combining deep expertise with pragmatic partnership, using a hands‑on approach to understand the specific needs of the organization and create tailored solutions to address key compliance risks.

Our Risk Advisory services include SOX readiness, managed internal controls testing and monitoring, co‑sourced/outsourced internal audit, segregation of duties and access risk review, policy and procedure development, enterprise risk management, and IT and cybersecurity risk assessment.

The Associate Director position for Riveron’s IT Risk Advisory group will be the day‑to‑day lead for consulting engagements working collaboratively with senior team members who provide guidance, coaching, and direction. Associate Directors are expected to conduct the majority of day‑to‑day project management activities on all of their engagements, including project plan development, reviewing staff work for quality, status updates to clients and internal management, and mentoring of staff and senior consultants.

Who You Are:

• Bachelor's and/or Master’s degree in Accounting, Finance, Management Information Systems, or another relevant field

• Relevant certification preferred, such as CISA, CISSP, CISM, CGEIT, or CIPP; CPA or is also valued but not required

• Minimum 8 years working as IT auditor or IT risk advisor for a public accounting firm, or other operational roles with a focus on information technology compliance. Experience should include performing internal or external IT audits

• Demonstrated knowledge of IT risk management, general and application controls, cybersecurity principles, and regulatory frameworks such as SOX, NIST, or ISO

• You have a passion for developing and maintaining client relationships

• You get the job done and have fun doing it

• You communicate skillfully with a variety of audiences and can create compelling stories from data

• You thrive in an ever‑changing, dynamic work environment

• You readily identify problems and instinctively look for solutions

• You enjoy participating in internal and external company initiatives such as community service, training, recruiting, and firm events

• You have the ability and desire to travel as required based on client location

What You’ll Do:

• Gain an understanding of the assigned clients’ business objectives, IT environment, and applicable regulatory and risk management landscape

• Lead projects in the areas of IT General Controls (ITGC) assessments, Sarbanes‑Oxley (SOX) IT compliance, ERP/application control reviews, and cybersecurity risk assessments

• Leverage knowledge of industry‑specific systems, applications, and infrastructure to identify technology risks and evaluate their impact on business and financial reporting

• Assess the design and operating effectiveness of IT controls related to access management, change management, system operations, and data integrity

• Obtain and analyze system‑generated data, configurations, and logs as a basis for evaluating control environments and identifying gaps

• Demonstrate proficiency in developing IT control process flows, risk/control matrices, and testing strategies for general and automated application controls

• Maintain the level of technical competency and professional care required for the completion of assignments in accordance with COSO, COBIT, and ISO auditing standards and related control techniques

• Set priorities, ensuring daily coordination among the project team, and monitor progress against schedules, budgets, project/task deliverables and status reporting

• Plan, review, and provide direction for the work of Staff and Senior Consultants

• Communicate extensively with clients to drive expectations and report on the status of ongoing projects

• Deliver oral and written presentations during and at the conclusion of projects by either recommending improvements or any operational/financial deficiencies to executive leadership

• Stay abreast of emerging risk areas, IT trends, and related control techniques

• Strengthen and maintain a network of industry contacts and establish new long‑term relationships

About Riveron:

At Riveron, we partner with clients—from global multinationals to high‑growth private entities—to solve complex finance challenges, guided by our DELTA values: Drive, Excellence, Leadership, Teamwork, and Accountability. Our entrepreneurial culture thrives on collaboration, diverse perspectives, and delivering exceptional outcomes. We are committed to fostering growth, both for our clients and our people, through mentorship, integrity, and a client‑centric approach. This inclusive environment offers flexibility, progressive benefits, and meaningful opportunities for impactful work that supports well‑being in and out of the office.

Riveron Consulting is an Equal Opportunity Employer and believes that we are stronger together through our diversity. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, disability status, protected veteran status, sexual orientation, gender identity or any other characteristic protected by law.

Full time roles are eligible for a full range of benefits including medical, dental, and vision insurance, 401(k) with company match, and PTO. A complete description of all available benefits can be found at Riveron's Benefits page at https://riveron.com/riveron-life/. Contract roles are not eligible for benefits.

Fraud Alert

Please beware of fraudulent schemes or impersonations when going through the job application process. A Riveron employee will never recruit via text or extend unsolicited employment offers. Additionally, a Riveron employee will never ask you to exchange money or purchase anything as part of the recruiting process.

Artificial intelligence (AI) tools are used to support the hiring process in screening, assessing, and/or selecting applicants for this position. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.