Senior IT Risk & Assurance Lead — Remote

BPM LLP; San Francisco (CA); Hybrid; USD 85,000 - 100,000; Full time

Benefits offered by this job

Flexible work arrangements

Professional development opportunities

Well-being resources and benefits

Job summary

BPM is seeking a Risk Assurance Senior in San Francisco to coordinate assurance engagements, support clients with IT risk and compliance, and mentor junior staff. You’ll work with ITGCs, ITACs, and SOX controls across multiple engagements, collaborating with managers and client personnel to deliver high-quality solutions.

Ideal candidates have 2–5 years’ IT audit experience, relevant certifications preferred, and a strong grasp of SOC 1/2 and SOX frameworks.

Qualifications

• Bachelor's degree in Information Systems, Accounting, CS or related field.
• 2–5 years of IT audits, SOC examinations, SOX compliance, or risk assurance experience.
• CISA, CISSP and/or CPA preferred.
• Strong SOC 1, SOC 2, and SOX knowledge including ITGCs and ITACs.
• Experience with ERP systems, cloud environments, and cybersecurity concepts is preferred.
• Ability to manage multiple assignments and meet deadlines.
• Excellent analytical and communication skills.

Responsibilities

• Lead and perform ITGC, ITAC, and automated control testing for SOX projects.
• Execute audits including SOC 1/2 engagements and SOX work, ensuring timely deliverables.
• Prepare workpapers, narratives, flowcharts, and risk/control matrices.
• Provide testing results and technical guidance to clients and team members.
• Mentor Associates and interns, offering feedback and guidance.
• Contribute to practice development, methodology improvements, training, and recruiting.

Skills

IT audits

SOC examinations

SOX compliance

risk assurance

Education

Bachelor's degree in Information Systems, Accounting, Computer Science, or related field

Tools

ERP systems

Azure

AWS

GCP

Job description

BPM is seeking a Risk Assurance Senior in San Francisco to coordinate assurance engagements, support clients with IT risk and compliance, and mentor junior staff. You’ll work with ITGCs, ITACs, and SOX controls across multiple engagements, collaborating with managers and client personnel to deliver high-quality solutions.

Ideal candidates have 2–5 years’ IT audit experience, relevant certifications preferred, and a strong grasp of SOC 1/2 and SOX frameworks.