Advisory Senior Associate

Frazier & Deeter•Charlotte, GA
•Hybrid

About The Position

The Advisory Senior Associate leads the day-to-day execution and delivery of advisory projects involving SOC examinations and reporting, IT internal audit and advisory, IT governance and risk assessment, system implementation reviews, Sarbanes-Oxley compliance, PCI, and information security. The role supports a growing advisory practice and calls for self-motivated professionals with a commitment to quality client service. The position includes assessing controls and client environments, identifying risks and improvement opportunities, producing clear audit documentation and client deliverables, and working with client stakeholders, external auditors, and internal teams to deliver engagements on time. The Senior Associate also contributes to engagement planning and risk assessment, helps develop staff associates, and maintains awareness of emerging technologies, regulatory trends, and industry practices. Travel is 20% to 40%.

Requirements

  • At least 3 years of Information Security or Information Technology experience.
  • Bachelor’s degree in Accounting, Finance, Management Information Systems (MIS), or a related field.
  • CISA candidate; other certifications accepted include CPA, CISSP, and CIA.
  • Demonstrated success in a client service role, preferably with a Big 4 or national advisory firm.
  • Familiarity with a variety of technologies, operating systems, databases, and reporting and data analytics tools.
  • Ability to interact with external auditors and management, communicate and interpret audit priorities and issues, and understand PCAOB and AICPA trends.
  • Exceptional organizational skills and capability to present to a Board or C-suite audience.
  • Strong written and verbal communication skills.
  • Experience with SSAE 18 / SOC 1 / SOC 2; Sarbanes-Oxley and PCAOB requirements; IT risk assessment and operational IT audit; IT general controls; COBIT; PCI; information security and cyber frameworks such as ISO 27000, NIST, and AICPA; HIPAA; and the systems development life cycle.
  • Business acumen and ability to anticipate and escalate issues.
  • Ability to meet deadlines.
  • Working knowledge of basic financial accounting, auditing, and financial reporting concepts.
  • Teaching and staff development ability.
  • Ability and appetite to invest in relationships.
  • Positive attitude, strong work ethic, and commitment to teamwork and professionalism.
  • Ability to travel 20% to 40%.

Nice To Haves

  • Experience in a client service role with a Big 4 or national advisory firm.
  • Certifications such as CPA, CISSP, or CIA are accepted in addition to CISA candidacy.

Responsibilities

  • Lead day-to-day execution of advisory engagements, including SOC 1/SOC 2 examinations, IT internal audits, IT risk assessments, and information security reviews.
  • Perform detailed testing and evaluation of IT general controls, application controls, cybersecurity controls, and operational processes.
  • Assess client environments against frameworks and criteria including COBIT, NIST, ISO 27000, PCI, HIPAA, and AICPA Trust Services Criteria.
  • Support Sarbanes-Oxley compliance, including walkthroughs, control design assessments, and testing in accordance with PCAOB standards.
  • Evaluate system implementation projects for appropriate controls, governance, and risk mitigation practices.
  • Prepare workpapers, audit documentation, and client deliverables communicating findings, risks, and recommendations.
  • Collaborate with client stakeholders, external auditors, and internal teams to clarify expectations, resolve issues, and ensure timely delivery.
  • Identify control gaps, process inefficiencies, and improvement opportunities, and develop practical recommendations.
  • Assist in drafting SOC reports, risk assessment summaries, audit reports, and executive-level presentations.
  • Mentor, train, and review staff associates’ work to support their professional development.
  • Contribute to engagement planning, scoping, and risk assessment activities.
  • Maintain working knowledge of emerging technologies, regulatory trends, and industry best practices.
  • Manage multiple projects while meeting deadlines and maintaining quality standards.
© 2026 Teal Labs, Inc
Privacy PolicyTerms of Service