Information Technology Risk Controls and Compliance Senior Associate

As an IT Risk Controls & Compliance, Senior Associate, you will have a unique opportunity to influence the quality, governance, and effectiveness of the technology resources used in audits. Operating in a fast-paced, dynamic environment, you will join the Risk Consulting Standards and Quality team to support the firm’s commitment to quality and directly contribute to the firm's design and monitoring of IT controls over quality management.

As a member of the Risk Consulting service line, you will have the unique opportunity to learn about the inner workings of the firm and the underlying technologies that are used to support the firm’s execution of audit and assurance engagements. You will work closely with quality management leaders, methodology teams, technology component owners, and subject matter specialists to support the firm's compliance with professional standards and quality management requirements. Your work will help ensure that technology resources — including software audit tools, AI-enabled capabilities, and supporting platforms — are appropriately governed and aligned with the firm's quality objectives. This role is ideal for professionals who enjoy combining technology, risk management, governance, and continuous improvement to drive quality across an entire practice. Rather than focusing primarily on executing audits, your role will center on optimizing internal processes, while mastering and designing IT general controls and automated control design, and driving digital governance across the practice.

Responsibilities:

• Support the design, implementation, operation, and continuous enhancement of the firm’s System of Quality Management as it relates to technology resources.

• Assist in establishing audit quality objectives, identifying and assessing quality risks, and designing and implementing technology-related responses and controls to address those quality risks

• Advise on the creation of control documentation, including IT process narratives, risk and control matrices, and control operation documentation to enhance the firm’s IT internal control environment

• Support technology risk assessments and reviewing, documenting, evaluating control’s design and operating effectiveness

• Use problem solving and critical thinking skills to quickly identify internal control deficiencies, evaluate their risk implications, and draw the appropriate conclusions to best advise our internal stakeholders

• Exercise professional skepticism, judgment and adhere to the code of ethics while on projects

• Work collaboratively as a part of the team and communicate effectively with RC Standards and Quality team members on a daily basis

• Manage multiple concurrent projects and ensure service excellence through prompt responses to internal stakeholders

• Provide timely, high-quality service that meets or exceeds expectations including coordinating the development and execution of the project work plan and internal deliverables

The Risk Controls & Compliance, Senior Associate  is expected to spend the majority of their time on projects related to RSM’s system of quality management. Team members may be requested to support methodology related efforts during any downtime. These efforts may include:

• Updating methodology, guidance and tools related to RC services

• Authoring articles and trainings on emerging internal control issues, and/or contributing to the development guides, practice aids, and whitepapers

Required Qualifications:

• Bachelor’s degree or equivalent experience in Information Technology, Management Information Systems (MIS), Accounting Information Systems, Business Administration, Accounting or a related field.

• Strong critical thinking, professional skepticism, and problem-solving skills with a passion for internal control design and operational excellence.

Preferred Experience & Technical Skills:

• 1 Year of relevant work experience in a governance, risk and compliance function

• Experience or strong foundational knowledge in IT General Controls (ITGCs), IT Automated Controls, Information Security frameworks (COBIT, NIST, ISO 27001, ITIL), and internal risk management.

• Proficiency in MS Visio (or similar tools) to develop clear process and data flow diagrams.

• Advanced Excel skills (pivot tables, VLOOKUPs, data analysis) along with strong PowerPoint and Word skills for authoring technical guidance and presentations.

• Qualified to pursue or currently holding job-relevant certifications such as CISA, CISM, CRISC, or CISSP.

• Exceptional verbal and written English communication skills, with the ability to translate complex technical IT controls into clear, educational guidance for internal teams and global stakeholders.