Risk Assurance Senior

2 months, 3 weeks ago
Full-time
Senior
Cybersecurity
BPM

BPM

BPM LLP is a top public accounting and advisory firm offering assurance, advisory, tax, and wealth management services with a focus on client success and innovation in business process management.

Diversified Financial Services
1K-5K
Founded 1986

Description

  • Lead and perform IT General Controls (ITGC), IT Application Controls (ITAC), and automated controls testing for SOX compliance engagements.
  • Perform audit activities for SOC 1 and SOC 2 engagements and SOX compliance, from walkthroughs through report preparation, while meeting delivery timelines.
  • Prepare and review workpapers, testing documentation, narratives, flowcharts, and risk and control matrices (RCMs).
  • Perform testing and provide technical expertise to clients and engagement team members.
  • Mentor, coach, and review the work of Associates and interns, providing constructive feedback and guidance.
  • Contribute to practice development initiatives, including methodology enhancements, training, and recruiting.
  • Coordinate assurance engagements and support clients through complex business and IT risk and compliance initiatives.

Requirements

  • Bachelor's degree in Information Systems, Accounting, Computer Science, or a related field.
  • 2–5 years of experience performing IT audits, SOC examinations, SOX compliance, or risk assurance engagements in public accounting or consulting.
  • Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), and/or CPA license preferred.
  • Strong understanding of SOC 1, SOC 2, and SOX frameworks, including ITGCs, ITACs, automated controls, business process controls, and third-party risk considerations.
  • Experience with ERP systems, cloud environments (Azure, AWS, GCP), and cybersecurity concepts preferred.
  • Ability to independently manage multiple assignments and prioritize competing deadlines.
  • Excellent analytical, problem-solving, and critical-thinking skills.
  • Strong verbal and written communication skills with the ability to interact effectively with client management and engagement teams.
  • Ability to synthesize research into clear, thoughtful, and actionable deliverables.

Benefits

  • Flexible work arrangements and personalized benefit structures.
  • Financial compensation options that provide choice and flexibility.
  • Interactive wellness platform, incentives, employee assistance program, and mental health resources.
  • Colleague Resource Groups (CRGs) for connection and support.
  • 14 firm holidays, including 2 floating holidays.
  • Flex PTO, paid family leave, winter break, summer hours, and remote work options.
  • CPA exam resources and bonuses, tuition reimbursement, a coach program, and BPM University classes, workshops, and seminars.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Sr. Offensive Security Consultant (Alpha Group)

VerTalents Internet Software & Services

VerSprite, through VerTALENTS, is seeking a remote U.S.-based Senior Offensive Security Consultant to lead advanced penetration testing, application security, and red team engagements for enterprise clients.

Active Directory Android AWS Azure iOS Penetration Testing
1 day, 6 hours ago

Senior Security Engineer - Red Team (Remote)

Insider Internet Software & Services

Insider One is hiring a Security Engineer – Red Team to assess and strengthen the security of its AI-powered customer engagement platform through offensive security testing and collaboration with engineering teams.

Agile JavaScript OWASP Penetration Testing PHP Python REST API
1 day, 6 hours ago

Senior Reverse Engineer - Remote

Zyte 251-1K Professional Services

Zyte is hiring a Reverse Engineer to develop scalable tooling, automation, and AI-assisted pipelines that help engineers analyze evolving antibot and browser-fingerprinting systems and ship solutions faster.

Burp Suite C C++ JavaScript LLM Machine Learning Node.js Python Rust Wireshark
3 days, 7 hours ago

Manager, Third-Party Risk Management (TPRM)

DoorDash 10K-50K Air Freight & Logistics

DoorDash is hiring a US-based Third-Party Risk Management Manager to lead its global vendor security risk program, manage TPRM teams, and build AI-enabled workflows across DoorDash, Wolt, and Deliveroo.

CI/CD Encryption OAuth OpenID Connect Penetration Testing Python SAML Secrets Management SQL
4 days, 6 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers