Risk Advisory - IT Risk Senior Associate

Apply; New York, Northern (NY, KY); Hybrid; USD 90,000 - 140,000; Full time

Benefits offered by this job

Medical, dental and vision insurance

401(k) with company match

PTO

Job summary

Riveron is seeking a Senior Associate for IT Risk Advisory in New York. You will collaborate with senior team members to assess IT General Controls, develop remediation roadmaps, and perform IT risk assessments for clients across industries.

You will guide projects, communicate with clients, and contribute to building strong relationships while staying current with IT risk trends and regulatory frameworks.

Qualifications

• Bachelor's and/or Master’s degree in Accounting, Finance, MIS, or related field.
• Certifications such as CISA/CISSP/CISM/CGEIT/CIPP preferred; CPA or CIA valued but not required.
• 3+ years IT audit or IT risk advisory experience at a public accounting firm.
• Knowledge of IT risk management, control frameworks, cybersecurity, and SOX/NIST/ISO.
• Ability to develop client relationships and communicate complex data clearly.
• Willingness to travel as required by client locations.

Responsibilities

• Understand clients’ objectives and their regulatory/risk environment.
• Assist IT General Control Assessments and Sarbanes-Oxley compliance projects.
• Leverage industry knowledge to assess IT environment impacts on clients.
• Evaluate design adequacy of controls and test operating effectiveness.
• Analyze data to review system/process efficiency and adequacy.
• Create internal controls process flows and risk/control matrices.
• Maintain competency with COSO, COBIT, ISO auditing standards.
• Plan and coordinate work with staff and senior consultants.
• Communicate with clients to set expectations and report progress.
• Deliver presentations to leadership on improvements and deficiencies.
• Stay updated on IT risks and trends.

Skills

Communication skills

Client relationships

Problem solving

Adaptability

Travel readiness

Education

Bachelor's or Master's in Accounting/Finance/MIS

CISA, CISSP, CISM, CGEIT, or CIPP

CPA or CIA valued

Job description

In today’s dynamic environment, business leaders face constantly shifting risks. Riveron helps organizations implement leading governance, risk and compliance practices by combining deep expertise with pragmatic partnership, using a hands‑on approach to understand the specific needs of the organization and create tailored solutions to address key compliance risks.

Our Risk Advisory services include SOX readiness, managed internal controls testing and monitoring, co‑sourced/outsourced internal audit, segregation of duties and access risk review, policy and procedure development, enterprise risk management, and IT and cybersecurity risk assessment.

The Senior Associate level position for Riveron’s IT Risk Advisory group will work collaboratively with senior team members who provide guidance, coaching, and direction. The role includes assessing the design and operating effectiveness of IT General Controls (ITGC), developing and executing remediation roadmaps, and performing IT risk assessments.

Who You Are:

• Bachelor's and/or Master’s degree in Accounting, Finance, Management Information Systems, or another relevant field

• Relevant certification preferred, such as CISA, CISSP, CISM, CGEIT, or CIPP; CPA or CIA is also valued but not required

• 3+ years of experience working as IT auditor or IT risk advisor for a public accounting firm. Experience should include performing internal or external IT audits

• Demonstrated knowledge of IT risk management, general and application controls, cybersecurity principles, and regulatory frameworks such as SOX, NIST, or ISO

• You have a passion for developing and maintaining client relationships

• You get the job done and have fun doing it

• You communicate skillfully with a variety of audiences and can create compelling stories from data

• You thrive in an ever‑changing, dynamic work environment

• You readily identify problems and instinctively look for solutions

• You enjoy participating in internal and external company initiatives such as community service, training, recruiting, and firm events

• You have the ability and desire to travel as required based on client location

What You’ll Do:

• Gain an understanding of the assigned clients’ objectives as well as their regulatory and risk management environment

• Assist projects in the areas of IT General Control Assessments, Sarbanes‑Oxley Compliance, and potentially Cybersecurity Engagements

• Utilize existing knowledge of client’s industry and IT environment to identify technological developments to evaluate impacts on the client’s business

• Assess internal controls’ design adequacy to mitigate financial, operational, and compliance risks and to test their operating effectiveness

• Obtain and analyze data as a basis for reviewing the adequacy, effectiveness, and efficiency of systems and processes

• Exhibit proficiency with creating internal controls process flows and risk/control matrices

• Maintain the level of technical competency and professional care required for the completion of assignments in accordance with COSO, COBIT, and ISO auditing standards and related control techniques

• Set priorities, ensuring daily coordination among the project team, and monitor progress against schedules, budgets, project/task deliverables and status reporting

• Plan, review, and provide direction for the work of Staff and Senior Consultants

• Communicate extensively with clients to drive expectations and report on the status of ongoing projects

• Deliver oral and written presentations during and at the conclusion of projects by either recommending improvements or any operational/financial deficiencies to executive leadership

• Stay abreast of emerging risk areas, IT trends, and related control techniques

About Riveron:

At Riveron, we partner with clients—from global multinationals to high‑growth private entities—to solve complex finance challenges, guided by our DELTA values: Drive, Excellence, Leadership, Teamwork, and Accountability. Our entrepreneurial culture thrives on collaboration, diverse perspectives, and delivering exceptional outcomes. We are committed to fostering growth, both for our clients and our people, through mentorship, integrity, and a client‑centric approach. This inclusive environment offers flexibility, progressive benefits, and meaningful opportunities for impactful work that supports well‑being in and out of the office.

Riveron Consulting is an Equal Opportunity Employer and believes that we are stronger together through our diversity. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, disability status, protected veteran status, sexual orientation, gender identity or any other characteristic protected by law.

Full time roles are eligible for a full range of benefits including medical, dental, and vision insurance, 401(k) with company match, and PTO. A complete description of all available benefits can be found at Riveron's Benefits page at https://riveron.com/riveron-life/. Contract roles are not eligible for benefits.