Director - Technology Risk Consulting - IT Audit

RSM•New York, NY

42d

About The Position

We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, culture and talent experience and our ability to be compelling to our clients. You'll find an environment that inspires and empowers you to thrive both personally and professionally. There's no one like you and that's why there's nowhere like RSM. RSM has an exceptional career opportunity available for a Director to join our Risk Consulting Services practice as a part of our Technology Risk Consulting team. RSM risk consulting services Directors are leaders seeking career growth, practice development, and accelerated leadership opportunities within an exciting, growing consulting practice. They are leaders who appreciate the opportunity to build teams, develop people, and serve clients in a dynamic fast-paced environment while simultaneously pursuing their career goals while also experiencing a rewarding work-life balance. Our clients depend upon effective risk management, internal audit, and governance over their enterprise- wide information technology in order to achieve their business objectives. Our Risk Consulting Services Technology Risk Consulting (TRC) professionals serve dynamic middle-market and other large complex organizations seeking to create and preserve value while effectively managing risks. Our TRC client service teams are also engaged with clients providing assurance over business processes and integrated systems. We work with a diverse group clients across a wide variety of industries developing strong working relationships with clients built on understanding their businesses, their challenges, risks, and information technology (IT) requirements.

Requirements

Bachelor's or master's degree in business, accounting, MIS, computer science, or related a discipline;
Ten years of experience working in the field of information technology risk management, internal audit, and/or public accounting and consulting, with a minimum of 8 years at a public accounting or professional services firm;
Experience leading engagements and leading managers and staff; experience managing project financials and managing projects to completion within agreed upon fess and budgets;
Experience managing people, mentoring staff, providing performance feedback, and monitoring workloads of the team while meeting stakeholder and client expectations;
Strong understanding of information technology controls and security experience in a widely used financial applications and ERP systems (such as SAP, Oracle, JD Edwards, PeopleSoft, or others) is preferred;
Executive command and complete understanding of relevant regulations and industry standards (e.g., SOX, AICPA SOC Reporting Standards, COSO, COBIT, FFIEC, ITIL, ISO27001, PCI, HIPAA and GLBA) and best practices and methodologies to address these requirements. Ability to apply these requirements to organizational internal control frameworks;
Professional certification(s) such as Certified Public Accountant (CPA), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professionals (CISSP); Certified Information Security Manager (CISM) and/or Certified Information Privacy Professional (CIPP) is required;
Recent successful experience in cultivating new business and related market-facing activities;
Exceptional interpersonal skills
Advanced written, verbal and presentation skills, including interaction with members of senior management;
Ability to travel to meet client needs (estimated to be in a range from 10% to 30%).

Nice To Haves

Strong understanding of information technology controls and security experience in a widely used financial applications and ERP systems (such as SAP, Oracle, JD Edwards, PeopleSoft, or others) is preferred;

Responsibilities

Consulting with client leadership on the design and optimization of controls utilizing a general knowledge of business processes, accounting, and information technologies. Draw upon your demonstrated technical, industry and IT risk advisory knowledge to become a trusted advisor to our clients across a variety of industries and sectors;
Consulting with client leadership on strategic plans and other business matters, helping our clients to anticipate emerging risks and information technology opportunities;
Overseeing the quality and timeliness of engagement teams efforts to identify internal IT controls, assess their design and operational effectiveness, determine risk exposures and to develop client recommendations and reports;
Supporting external financial statement, SOX compliance, and Internal Audit/SOX engagements for application and information technology general computer controls as a leader of integrated external and internal audit teams with IT general controls, IT operational risks, and IT risk management processes (including controls);
Supporting external financial statement, SOX compliance, and Internal Audit/SOX engagements evaluating and testing application controls, particularly automated controls on a wide range of ERP systems and software applications across a wide variety of client business processes;
Leading client engagements pertaining to SOC attestation and other third-party opinion services;
Leading consulting and audit engagements pertaining to cybersecurity risk management;
Leverage your existing network and personal brand in the marketplace to drive growth for the risk consulting practice; including: identifying, proposing on, and securing new opportunities;
Oversee a diverse book of business, maintaining overall responsibility for the profitability, effective delivery and engagement risk of all client related work within the portfolio;
Manage multiple client projects simultaneously, while providing leadership on proposal opportunities and ongoing internal initiatives;
Recruit and retain future leaders of the firm. Leverage your experience and expertise to advance the professional aspirations and skills of your colleagues, our managers, and our risk consulting services staff.