Riveron
Risk Advisory - Associate Director (IT Risk)
Atlanta, GA, Remote. Posted a month ago
The role
The Associate Director will lead consulting engagements for the IT Risk Advisory group. This person will manage project plans, review staff work, and conduct IT risk assessments, SOX compliance, and cybersecurity reviews.
What you will do
- Lead projects in ITGC assessments, SOX IT compliance, ERP/application control reviews, and cybersecurity risk assessments
- Assess design and operating effectiveness of IT controls
- Obtain and analyze system-generated data, configurations, and logs
- Develop IT control process flows, risk/control matrices, and testing strategies
- Maintain technical competency in accordance with COSO, COBIT, and ISO auditing standards
- Set priorities and monitor progress against schedules, budgets, and deliverables
- Plan, review, and provide direction for the work of Staff and Senior Consultants
- Communicate extensively with clients to drive expectations and report project status
- Deliver oral and written presentations to executive leadership
- Stay abreast of emerging risk areas and IT trends
Required qualifications
- Bachelor's and/or Master’s degree in Accounting, Finance, Management Information Systems, or another relevant field
- Minimum 8 years working as IT auditor or IT risk advisor for a public accounting firm, or other operational roles with a focus on information technology compliance
- Experience performing internal or external IT audits
- Demonstrated knowledge of IT risk management, general and application controls, cybersecurity principles, and regulatory frameworks such as SOX, NIST, or ISO
- Ability to travel as required based on client location
Nice to have
- CISA
- CISSP
- CISM
- CGEIT
- CIPP
- CPA
Benefits
- medical insurance
- dental insurance
- vision insurance
- 401(k) with company match
- PTO
About the company
Riveron partners with clients to solve complex finance challenges using their DELTA values: Drive, Excellence, Leadership, Teamwork, and Accountability. They provide governance, risk, and compliance practices through a hands-on approach.