Senior IT Risk & Controls Advisory Associate

cbh; United States; On-site; USD 90,000 - 120,000; Full time

Job summary

Cherry Bekaert’s Risk Advisory Services team seeks an IT Senior Associate passionate about helping organizations navigate technology risk while enabling business growth. You will assess IT controls, risk management programs, and the technology infrastructure that supports operations and growth.

You will lead IT risk assessments, audits, and SOX readiness, building trusted relationships with key decision makers across engagements.

Qualifications

• Bachelor's degree in Information Systems, IT, Accounting, Cybersecurity, Computer Science, or related field.
• 3+ years of experience in IT audit, IT risk, internal audit, SOX compliance, information security, or IT risk advisory.
• Experience evaluating IT General Controls, automated controls, and business process controls.
• Understanding of core technology infrastructure concepts (networks, cloud, databases, OS, apps).
• Strong analytical, communication, and report-writing skills; able to manage multiple priorities.
• Ability to travel as needed, not to exceed 25%.

Responsibilities

• Perform IT risk assessments and translate findings into practical recommendations.
• Execute IT internal audits; evaluate ITGCs and automated controls.
• Support SOX readiness and 404 compliance initiatives (access, change, operations, SDLC controls).
• Evaluate IT governance, third-party risk, and controls using COSO, COBIT, and NIST.
• Assess cybersecurity governance and risks related to cloud, AI, automation, BC/DR, and emerging tech.
• Lead client walkthroughs, interviews, meetings, and status discussions; manage timelines and budgets.
• Advise on scaling systems, processes, and risk management to support growth and resilience.

Skills

IT audit

IT risk

SOX compliance

ITGCs

Internal audit

Cybersecurity

Education

Bachelor's degree in Information Systems

Tools

COSO

COBIT

Job description

Cherry Bekaert’s Risk Advisory Services team seeks an IT Senior Associate passionate about helping organizations navigate technology risk while enabling business growth. You will assess IT controls, risk management programs, and the technology infrastructure that supports operations and growth.

You will lead IT risk assessments, audits, and SOX readiness, building trusted relationships with key decision makers across engagements.