Internal Audit & Risk Director (SOX Focus)

Baker Tilly•Washington DC, DC

About The Position

Baker Tilly is seeking an Internal Audit & Risk Director with a focus on SOX and insurance risk advisory. The role is part of the firm’s Risk Advisory practice, which helps clients assess risks, develop strategies, and achieve business objectives through expertise in risk, governance, internal audit, compliance, IT, and cybersecurity. The Director works closely with insurance client executives and management teams, leads internal audit and controls engagements, and advises clients on regulatory readiness, SOX programs, and sustainable control practices. The position includes managing engagement scope, budgets, staffing, timelines, client communications, and profitability. It also involves coaching and developing team members, building client and community relationships, and participating in professional development. Baker Tilly describes opportunities for career growth, flexibility in where and how work is performed, collaboration, and work-life balance. Work location arrangements should be discussed with a Baker Tilly talent acquisition professional.

Requirements

Four-year degree.
Twelve years of experience.
CPA or CIA designation required.
Excellent analytical, technical, and problem-solving skills, with strong attention to detail.
Flexibility to travel to client sites, including overnight travel as needed, up to 30%.

Nice To Haves

Bachelor’s degree in accounting, finance, or a related program.
12 or more years of experience in risk advisory, internal or external audit, business process reengineering, and/or internal controls.
Experience with SOX-specific engagements.
Experience as a client-serving professional for a consulting firm.

Responsibilities

Work with client executives and management teams to understand their businesses and identify and manage financial and operational risks.
Lead insurance-focused internal audit and controls engagements and teams.
Plan and lead internal audit engagements for insurance organizations across property and casualty, life and health, reinsurance, and insurance-adjacent operations such as MGAs and TPAs.
Evaluate process and control design and operating effectiveness across common insurance functions.
Apply a risk-based approach to scope and test controls and deliver practical recommendations while supporting Model Audit Rule and SOX programs.
Lead Model Audit Rule 205 readiness, implementation, and ongoing administration, including risk and control scoping, documentation, testing, deficiency evaluation, and remediation tracking.
Lead SOX design, implementation, or enhancement work, including process narratives and flows, control design, testing, and coordination with external audit.
Help clients build sustainable control programs that balance regulatory expectations with operational efficiency.
Draft audit issues that explain business impact and root cause and provide realistic remediation recommendations.
Develop and present results to executive management and audit committees when required.
Maintain high-quality workpapers and documentation consistent with internal audit standards and Baker Tilly methodology.
Manage engagement scope, budgets, staffing, timelines, and client communications.
Coach and develop managers, seniors, and associates through review, feedback, and hands-on guidance.
Assist with engagement staffing, billing and collections, and meeting client profitability targets.
Network and build strong relationships internally and externally with clients and the community.
Participate in professional development and firm-wide learning and development programs.
Support team members’ growth and professional goals through the Baker Tilly Care and Teach philosophy.