Overview
IT Senior Associate, Risk Advisory Services. The Senior Associate, Data Risk & Security (DRS) will provide risk consulting and issue resolution to clients in general IT controls, IT application controls, IT process improvement, pre and post systems implementations, and IT security in a banking environment (commercial and / or retail banking). This role participates in all stages of IT internal audits or IT consulting engagements, and assists with planning, field work, engagement wrap-up and report composition, along with providing recommendations to address client risks.
Job Duties / Responsibilities
- Acts as primary contact for clients regarding basic questions and information
- Develops and monitors budgets (budget-to-actual) for all assigned engagements
- Conducts informational interviews and facilitates meetings with clients during the engagement process
- Obtains information, documents and data from clients to support analysis and research of client issues
- Documents and analyzes client processes, risks and controls, with guidance from senior DRS professionals
- Reviews client contracts and develops contract summaries, including key provisions and financial information based on contract type
- Develops initial deliverables and / or solutions to client issues
- Reassesses risk and communicates with other professionals and / or client as necessary
- Assists with management of engagements to ensure engagement metrics are achieved
- Utilizes research tools, databases and trade publications to understand client industry
- Develops relationships with client personnel and management
- Prepares formal and informal presentations for client meetings
- Partners with leadership to complete research and draft proposals and reports, as necessary
- Implements project plans and maintains documentation and work papers for engagements
- Maintains confidentiality of all documentation and work papers
- Conducts risk assessment of assigned department or functional area, while overseeing staff
- Establishes risk-based IT audit programs
- Determines scope of review with the engagement manager
- Documents financial reporting cycles or internal audit areas, and identifies key controls
- Assesses internal control design and operational effectiveness
- Conducts audit testing, identifies reportable issues and risk dimensions
- Determines compliance with applicable legislation and audit policies and procedures
- Communicates findings to senior management and drafts comprehensive reports
- Keeps abreast of IT technology developments, cloud services, IT security breaches, auditing standards updates and emerging issues
- Other duties as required
Supervisory Responsibilities
Supervises day-to-day workload of Data Risk & Security Associates on assigned engagements and reviews work productEnsures DRS Associates are trained on audit software and engagement processesDelivers periodic performance feedback and completes evaluations for DRS AssociatesActs as mentor to DRS Associates, as appropriateEducation / Qualifications
Bachelor's degree in Information Technology, Computer Science, Accounting, or Finance, requiredExperience
Two or more years of experience within a public accounting firm or industry environment performing internal audit, IT audit, consulting or risk services, requiredExperience with IT internal controls, including design and testing of controls, requiredExperience with IT Audit and Sarbanes-Oxley, with a focus on entity-wide risk assessment, requiredOne or more years of supervisory experience, preferredExperience performing IT security audits and third-party vendor risk assessments, preferredLicenses / Certifications
CISA, CISM, CISSP, or other equivalent certification, preferredSoftware
Proficient in Microsoft Office Suite, specifically Excel and Word, requiredExperience auditing ERP applications (e.g., SAP, Oracle), preferredExperience with IT audit applications and research tools, preferredWorking knowledge of data visualization and analytics software (Power BI, Alteryx, Tableau or similar), preferredOther Knowledge, Skills & Abilities
Knowledge of automated business systems, change management controls, and related audit techniquesUnderstanding of various network architectures, operating systems, and security methodsCloud security and third-party vendor risks; logical data and application access controlsDisaster recovery and business continuity methodsStrong verbal and written communication; ability to present to professionals at all levelsAbility to multi-task, work independently and in a team; strong analytical skillsAbility to travel, as neededCompensation
Individual salaries are determined based on qualifications, experience, skills, and geography. Ranges commonly observed : California, Colorado, Illinois, Maryland, Minnesota, NYC / Long Island / Westchester, Washington, and Washington DC : $85,000 - $100,000.
About Us
Join us at BDO, where you will find a place where your work is impactful and you are valued for your individuality. We offer flexibility and opportunities for advancement. Our culture emphasizes meaningful connections, curiosity, and authenticity, with a focus on delivering exceptional and sustainable outcomes for our people, clients, and communities. BDO is proud to be an ESOP company.
Equal Opportunity Employer, including disability / veteran status. All qualified applicants will receive consideration without regard to race, color, religion, sex, national origin, disability, or protected veteran status.
J-18808-Ljbffr