Senior ERM & SOX Associate - Risk & Controls

PwC; Washington (District of Columbia); On-site; USD 77,000 - 202,000; Full time

Job summary

PwC in Washington, DC is seeking an Enterprise Risk Management/SOX Senior Associate to support internal audit and control-focused client work within our Audit and Assurance practice. You will evaluate governance, risk management, and internal control processes, build client connections, manage workstreams, and mentor junior team members while adapting to shifting client needs.

You will contribute to enterprise risk and SOX activities by interpreting data, developing recommendations, and using

Qualifications

• Bachelor’s degree required.
• 3+ years of experience in risk management, SOX, or internal audit preferred.
• CIA/CPA/CISA certifications preferred.

Responsibilities

• Analyzing enterprise risk and internal control processes for client engagements.
• Assessing SOX and internal audit requirements across financial reporting and business operations.
• Developing workstreams for control design, testing, and remediation activities.
• Reviewing process documentation, control narratives, and risk matrices for accuracy and completeness.
• Interpreting audit findings and translating them into practical recommendations for control improvements.
• Coordinating with client stakeholders to gather information, discuss issues, and track follow-up actions.
• Applying auditing methodologies, risk assessment tools, and digital solutions to streamline delivery.
• Mentoring junior team members on assigned tasks, work products, and technical procedures.

Education

Bachelor’s degree

Job description

PwC in Washington, DC is seeking an Enterprise Risk Management/SOX Senior Associate to support internal audit and control-focused client work within our Audit and Assurance practice. You will evaluate governance, risk management, and internal control processes, build client connections, manage workstreams, and mentor junior team members while adapting to shifting client needs.

You will contribute to enterprise risk and SOX activities by interpreting data, developing recommendations, and using