Назад
Company hidden
6 дней назад

IT Risk Senior Associate (SOX & Internal Audit)

101 200 - 129 030$
Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
IT Risk Senior Associate (SOX & Internal Audit) (IT risk and internal audit): Executing and reporting on IT internal audit, SOX compliance, control assessments, and IT risk management engagements with an accent on control design, operating effectiveness, and cybersecurity risk standards. Focus on assessing ERP, operating system, database, infrastructure, GRC, and IAM controls while coordinating multiple client engagements.

Location: Hybrid in San Francisco, Cleveland, New York, San Jose, Boston, Charlotte, or Chicago, United States; travel as needed.

Base salary: $101,200–$129,030 per year.

Company

hirify.global provides audit, assurance, tax, advisory, risk, compliance, and controls services through a multinational professional services platform.

What you will do

  • Participate in client engagements from start to completion, including co-sourced and outsourced IT internal audit, IT control assessments, IT risk management assessments, and SOX testing.
  • Execute and report on IT control design and operating effectiveness procedures based on engagement scope and client risk factors.
  • Help clients design and implement IT controls and address business risks in proactive and responsive contexts.
  • Understand client industries, objectives, strategies, operations, processes, IT systems, and controls.
  • Collaborate with project teams, clients, Advisory Business Lines, Audit Services, and Tax Services.
  • Manage multiple engagements, meet performance metrics, and deliver services in line with project and client expectations.

Requirements

  • Bachelor’s degree in Accounting, Finance, Information Technology, MIS, or a related field.
  • At least 2 years of related experience with a professional services firm or in an internal audit function.
  • Understanding of IT risk management and cybersecurity risk management standards, including COBIT and NIST CSF.
  • Experience assessing the design and operating effectiveness of IT risk management and IT controls, including IT general controls and application controls, for Internal Audit, SOX compliance, or other risk management activities.
  • Strong understanding of IT general controls and the current focus areas of external financial statement auditors.
  • Experience assessing at least one operating system, database system, and IT infrastructure or network component, such as OS/400, Windows, UNIX, Oracle, SQL, domain controllers, firewalls, routers, or intrusion prevention and detection solutions.
  • Experience with ACL, IDEA, QlikView, QlikSense, Tableau, Spotfire, or other analytics and visualization solutions.
  • Ability to execute multiple engagements and complete priorities in a rapidly growing team environment.
  • Exceptional client service, communication, analytical, organizational, and project management skills; strong computer skills including Microsoft Visio and Office Suite applications.
  • Ability to travel as needed.

Nice to have

  • CISA, CISSP, CISM, or CPA license/certification.
  • Experience assessing the configuration and controls of ERP systems such as SAP, Oracle, PeopleSoft, or JD Edwards.
  • Experience assessing SAP ECC or S/4HANA configuration and controls, including BASIS, security administration, and process controls.
  • Experience assessing GRC and Identity and Access Management solutions.

Culture & Benefits

  • Hybrid workplace with flexibility and professional support.
  • Career-growth opportunities within a multinational, multidisciplinary platform.
  • Collaboration across advisory, audit, and tax service lines.
  • Access to resources and an environment designed to support professional development.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →