Senior IT Risk & Assurance Lead (SOX/SOC)

BPM LLP; San Jose (CA); Hybrid; USD 85,000 - 100,000; Full time

Benefits offered by this job

Total rewards package

Well-being resources

Balance & flexibility

Professional development opportunities

Job summary

BPM LLP is seeking a Risk Assurance Senior to lead IT audit engagements, coordinating SOX, SOC 1/2 efforts and ITGC/ITAC testing. You will mentor junior team members, work with client personnel, and help deliver high-quality assurance solutions across IT risk and compliance initiatives.

The role requires strong knowledge of SOC 1/2 and SOX frameworks, ERP and cloud environments, and effective communication with clients and teams.

Qualifications

• 2–5 years of IT audits, SOC examinations, SOX compliance, or risk assurance engagements in public accounting or consulting.
• CISA, CISSP and/or CPA preferred.
• Strong understanding of SOC 1, SOC 2, SOX frameworks including ITGCs, ITACs, automated controls, and third-party risk.

Responsibilities

• Lead and perform IT General Controls (ITGC), IT Application Controls (ITAC), and automated controls testing for SOX engagements.
• Perform SOC 1/SOC 2 and SOX audit activities, including walkthroughs and report preparation.
• Prepare and review workpapers, testing documentation, narratives, flowcharts, and risk/control matrices.
• Provide technical expertise to clients and engagement teams; mentor associates and interns.
• Contribute to practice development initiatives, including methodology enhancements and training.

Skills

IT audits

SOX

SOC 1/2

CISA/CISSP/CPA

Communication

Education

Bachelor's degree in Information Systems, Accounting, Computer Science

Tools

ERP systems

Azure

AWS

GCP

Cybersecurity concepts

Job description

BPM LLP is seeking a Risk Assurance Senior to lead IT audit engagements, coordinating SOX, SOC 1/2 efforts and ITGC/ITAC testing. You will mentor junior team members, work with client personnel, and help deliver high-quality assurance solutions across IT risk and compliance initiatives.

The role requires strong knowledge of SOC 1/2 and SOX frameworks, ERP and cloud environments, and effective communication with clients and teams.