Associate, Risk Advisory

Stout • Boston, MA

2d

About The Position

At Stout, we’re dedicated to exceeding expectations in all we do – we call it Relentless Excellence ®. Both our client service and culture are second to none, stemming from our firmwide embrace of our core values: Positive and Team-Oriented, Accountable, Committed, Relationship-Focused, Super-Responsive, and being Great communicators. Sound like a place you can grow and succeed? Read on to learn more about an exciting opportunity to join our team.

Impact You’ll Make
Execute Risk Advisory engagements focused on SOX 404 compliance and controls assessments for private companies. Perform walkthroughs, document business processes, and evaluate the design and operating effectiveness of internal controls—including IT general controls (ITGCs) and application controls—in support of SOX 404 and other regulatory engagements. Identify control deficiencies and clearly communicate findings to engagement teams and clients, escalating matters as appropriate. Prepare and maintain controls documentation, including process flowcharts, risk-control matrices, and testing workpapers, in accordance Stout methodology. Support controls-related engagements for private companies, including risk assessments, control gap analyses, and remediation support.

What You’ll Do
Support the day-to-day execution of Risk Advisory engagements, collaborating closely with engagement leaders, internal teams, and clients across all phases of SOX 404 and controls-related projects. Assist in scoping, planning, and executing controls testing—including walkthroughs, test of design, and test of operating effectiveness—across key business processes and IT environments. Prepare client deliverables including risk-control matrices, process flow documentation, testing workpapers, deficiency assessments, and management reports. Work with Stout's proprietary and third-party methodologies including Workiva, AuditBoard, and Floqast; as well as client ERP systems such as NetSuite, SAP, Oracle, Workday, and Sage. Identify control gaps and process improvement opportunities, recommend enhancements, and support clients through remediation and control implementation. Support companies preparing for or recently completing an IPO, including first-time SOX 404 implementations, ICFR readiness assessments, and remediation of control environments transitioning from private to public company requirements. Stout's Risk Advisory practice is experiencing rapid growth driven by increasing regulatory complexity and a strong pipeline of IPO-readiness and SOX 404 engagements. The selected candidate will play a meaningful role in building this practice—with direct exposure to leadership, client relationships, and career advancement opportunities that are rare at this level.

Requirements

• Working knowledge of U.S. GAAP and financial reporting concepts; familiarity with technical accounting topics (e.g., revenue recognition, stock-based compensation) is a plus.
• Strong understanding of internal controls over financial reporting (ICFR), including hands-on experience with SOX 404 walkthroughs, risk assessments, control design and operating effectiveness testing, IT general controls (ITGCs), and application controls.
• Solid grounding in the COSO Internal Control—Integrated Framework and PCAOB auditing standards (including AS 2201) as they relate to SOX 404 engagements.
• Excellent verbal and written communication skills.
• Ability to translate control-related concepts, testing results, and deficiency assessments into clear, plain-English explanations for client management and audit committees.
• Entrepreneurial mindset with a strong client-service orientation.
• Passion for leveraging technology to improve audit and controls processes—including experience with or eagerness to learn GRC platforms and a desire to contribute ideas for building proprietary tools and methodologies that enhance the practice.
• Highly organized with strong project and time management skills, with the ability to manage multiple engagements and deadlines effectively.
• Positive and enthusiastic attitude
• Excels in a team-oriented work environment
• Bachelor’s or Master’s degree in Accounting
• 2+ years of relevant professional experience (minimum two busy seasons) in external audit with direct SOX 404 / ICFR engagement experience.
• Big 4 experience strongly preferred
• CPA license or active progress toward CPA certification.

Nice To Haves

• Familiarity with technical accounting topics (e.g., revenue recognition, stock-based compensation)
• Experience with or eagerness to learn GRC platforms
• Desire to contribute ideas for building proprietary tools and methodologies that enhance the practice.

Responsibilities

• Execute Risk Advisory engagements focused on SOX 404 compliance and controls assessments for private companies.
• Perform walkthroughs, document business processes, and evaluate the design and operating effectiveness of internal controls—including IT general controls (ITGCs) and application controls—in support of SOX 404 and other regulatory engagements.
• Identify control deficiencies and clearly communicate findings to engagement teams and clients, escalating matters as appropriate.
• Prepare and maintain controls documentation, including process flowcharts, risk-control matrices, and testing workpapers, in accordance Stout methodology.
• Support controls-related engagements for private companies, including risk assessments, control gap analyses, and remediation support.
• Support the day-to-day execution of Risk Advisory engagements, collaborating closely with engagement leaders, internal teams, and clients across all phases of SOX 404 and controls-related projects.
• Assist in scoping, planning, and executing controls testing—including walkthroughs, test of design, and test of operating effectiveness—across key business processes and IT environments.
• Prepare client deliverables including risk-control matrices, process flow documentation, testing workpapers, deficiency assessments, and management reports.
• Work with Stout's proprietary and third-party methodologies including Workiva, AuditBoard, and Floqast; as well as client ERP systems such as NetSuite, SAP, Oracle, Workday, and Sage.
• Identify control gaps and process improvement opportunities, recommend enhancements, and support clients through remediation and control implementation.
• Support companies preparing for or recently completing an IPO, including first-time SOX 404 implementations, ICFR readiness assessments, and remediation of control environments transitioning from private to public company requirements.

Benefits

• Competitive compensation
• Benefits and wellness options tailored to support employees at every stage of life
• Flexible work schedules
• Discretionary time off policy
• Annual bonus plan

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level