Senior IT Risk & Assurance Auditor

BPM LLP; Sacramento (CA); On-site; USD 85,000 - 100,000; Full time

Benefits offered by this job

Flexible work arrangements

Well-being resources

Remote work options

Job summary

BPM LLP is seeking a Risk Assurance Senior in California to lead ITGC/ITAC testing for SOX and SOC engagements. You will coordinate assurance projects, mentor junior team members, and interact with client personnel to deliver high-quality IT audit solutions.

The role requires 2–5 years in IT audits or risk assurance, with preferred certifications (CISA/CISSP/CPA) and knowledge of ERP/cloud environments. Competitive salary and flexible work options are highlighted.

Qualifications

• 2–5 years of IT audits, SOC examinations, SOX compliance, or risk assurance engagements.
• Understanding of SOC 1, SOC 2, and SOX frameworks with ITGC/ITAC.

Responsibilities

• Lead and perform IT General Controls (ITGC), IT Application Controls (ITAC), and automated controls testing for SOX engagements.
• Perform audit activities for SOC 1 and SOC 2 engagements and SOX compliance, ensuring timely deliverables.
• Prepare and review workpapers, testing documentation, narratives, flowcharts, and risk and control matrices (RCMs).
• Mentor and guide Associates and interns, providing feedback and support.
• Contribute to practice development initiatives, including methodology enhancements and training.

Skills

IT audits

SOC & SOX

CISA/CISSP/CPA preferred

Communication skills

Education

Bachelor's degree in IS/Accounting/CS

Tools

ERP systems

Azure

AWS

GCP

Job description

BPM LLP is seeking a Risk Assurance Senior in California to lead ITGC/ITAC testing for SOX and SOC engagements. You will coordinate assurance projects, mentor junior team members, and interact with client personnel to deliver high-quality IT audit solutions.

The role requires 2–5 years in IT audits or risk assurance, with preferred certifications (CISA/CISSP/CPA) and knowledge of ERP/cloud environments. Competitive salary and flexible work options are highlighted.