IT Senior Associate, Risk Advisory Services
The Senior Associate, Data Risk & Security (DRS) will be responsible for providing risk consulting and issues resolution to clients in the areas of general IT controls, IT application controls, information technology process improvement, pre and post systems implementations, and IT security, specifically in a banking environment (commercial and / or retail banking).
The Senior Associate, Data Risk & Security participates in all stages of IT internal audits or IT consulting engagements, and provides assistance with planning, field work, engagement wrap-up and report composition, along with providing recommendations to address client risks.
Job Duties
- Acts as primary contact for clients regarding basic questions and information
- Develops and monitors budgets for all assigned engagements
- Conducts informational interviews, and facilitates meetings with clients during engagement process
- Obtains information, documents and data from clients to support the completion of analysis and research of client issues
- Documents and analyzes client processes, risks and controls, with guidance and direction from senior DRS professionals
- Reviews client contracts and develops contract summaries, including key provisions and financial information based on type of contract
- Develops initial deliverables and / or solutions to client issues
- Reassesses risk, and communicates with other professionals and / or client, as necessary
- Assists with management of engagements to ensure engagement metrics are achieved
- Utilizes research tools, databases and trade publications to develop an understanding of a client's industry
- Develops relationships with client personnel and management members
- Prepares formal and informal presentations for client meetings
- Partners with leadership to complete research and draft proposals and reports, as necessary
- Implements project plans, and maintains all documentation and work papers associated with client engagements
- Maintains the confidence of all documentation and work papers associated with client engagements
- Conducts risk assessment of assigned department or functional area in established timeline, while overseeing staff
- Establishes risk-based IT audit programs
- Determines scope of review in conjunction with the engagement manager
- Documents financial reporting cycles or internal audit area, and identifies key controls
- Assesses internal control design and operational effectiveness
- Conducts audit testing of specified area, and identifies reportable issues and dimension of risk
- Determines compliance with appropriate legislation and / or audit policies and procedures
- Communicates findings to senior management, and drafts comprehensive report of audited area
- Stays abreast of current developments in IT technology, cloud services, IT security breaches, auditing standard updates and other emerging issues which may impact the audit process
Supervisory Responsibilities
Supervises the day-to-day workload of Data Risk & Security Associates on assigned engagements, and reviews work productEnsures DRS Associates are trained on all relevant audit software and engagement processes and proceduresDelivers periodic performance feedback, and completes performance evaluations for DRS AssociatesActs as mentor to DRS Associates, as appropriateEducation
Bachelor's degree in Information Technology, Computer Science, Accounting, or Finance, requiredExperience
Two or more years of experience within a public accounting firm or industry environment performing internal audit, IT audit, consulting or risk services, requiredExperience with IT internal controls, including design and testing of controls, requiredExperience with IT Audit and Sarbanes Oxley, with a focus in entities wide risk assessment, requiredOne or more years of supervisory experience, preferredExperience performing IT Security audits and third-party vendor risk assessments, preferredLicense / Certifications
CISA, CISM, CISSP, or other equivalent certification, preferredSoftware
Proficient in the use of Microsoft Office Suite, specifically Excel and Word, requiredExperience auditing various mainstream ERP applications, preferredExperience with various IT audit applications and research tools, preferredWorking knowledge of data visualization and analytics software, preferredOther Knowledge, Skills & Abilities
Knowledge of automated business systems, program change management controls, input, processing and output controls and related audit techniquesVarious network architectures and operating systemsNetwork access security methods such as firewalls, proxies, virtual private networks, and IDS / IPSPhysical facilities and equipment access controlsCloud security and third-party vendor risksLogical data and application access controlsDisaster recovery and business continuity methodsSolid understanding and capable of planning and coordinating the stages to perform an IT auditKnowledge of internal accounting controls, professional standards and regulations and systemsStrong verbal and written communication skillsAbility to adapt style and messaging to effectively communicate with professionals at all levelsAbility to successfully multi-task while working independently and within a group environmentSuperior analytical and diagnostic skillsCapable of working in a demanding, deadline driven environment with a focus on details and accuracyAbility to adapt to rapidly changing environments successfullySolid organizational skills, especially the ability to meet project deadlines with a focus on detailsCapable of effective managing a team of professionals and delegating work assignments, as neededCapacity to build and maintain strong relationships with client personnelAbility to travel, as neededBDO is an Equal Opportunity Employer, including disability / vets. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status.
J-18808-Ljbffr