IT Risk Advisory Senior Associate

Cherry Bekaert • Atlanta, GA

3d • Hybrid

About The Position

Ranked among the largest accounting and consulting firms in the country and consistently recognized as a Great Place to Work, Cherry Bekaert delivers innovative advisory, assurance and tax services to our clients. At Cherry Bekaert we create shared success through teamwork, energy, and expertise. We approach today’s toughest business challenges with a client-first mindset, working together to create exceptional value. We are all committed to making a difference for our people, our clients, our community, and our professions. To meet this commitment, Cherry Bekaert will provide you with the space to pursue growth and development opportunities that will guide and support you at each stage of your personal and professional journey. As a result of continued growth, Cherry Bekaert’s Risk Advisory Services team is seeking an IT Senior Associate who is passionate about helping organizations navigate technology risk while enabling business growth. You will work with organizations to evaluate not only the effectiveness of their IT controls and risk management programs, but also the technology infrastructure that supports business operations and growth. Successful candidates understand how core infrastructure components, including networks, servers, cloud platforms, databases, identity and access management, and enterprise applications, scale alongside evolving business needs. Given the client-facing nature of this role, you will have the opportunity to develop your leadership capabilities while building trusted relationships with key decision makers as you deliver value across a broad scope of projects, including but not limited to: IT Risk Assessment IT General Controls (ITGCs) Internal Audit SOX Compliance IT Governance Cybersecurity Risk Management Technology Infrastructure Review & Roadmapping Control Design and Optimization

Requirements

• Bachelor’s degree in Information Systems, Information Technology, Accounting, Cybersecurity, Computer Science, or a related field
• Minimum of 3+ years of demonstrated experience in IT audit, IT risk, internal audit, SOX compliance, information security, or IT risk advisory
• Experience evaluating IT General Controls, automated controls, and business process controls, supported by a strong understanding of risk management and internal control concepts
• Understanding of core technology infrastructure concepts, including networks, cloud environments, databases, operating systems, and enterprise applications, and how these technologies support scalability, operational efficiency, and business growth
• Strong analytical, communication, and report-writing skills, with the ability to manage multiple priorities and deadlines in a client-service environment
• Ability to travel as need to support client engagements, not expected to exceed 25%

Nice To Haves

• Certified Information Systems Auditor (CISA), Certified Public Accountant (CPA), Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC), or Certified Internal Auditor (CIA) credential, or progress toward one of these certifications
• Experience with SOX 404 compliance, IT risk assessments, internal audit, cybersecurity risk assessments, COSO, COBIT, or enterprise resource planning environments such as SAP, Oracle, Workday, NetSuite, or Microsoft Dynamics
• Experience evaluating IT infrastructure, cloud platforms, ERP environments, or technology-enabled business transformations, including considerations related to growth, system scalability, and organizational change
• Familiarity with governance, risk, and compliance platforms, data analytics, or automation tools

Responsibilities

• Perform IT risk assessments that identify technology, operational, cybersecurity, and compliance risks and translate findings into practical recommendations
• Execute IT internal audits and evaluate the design and operating effectiveness of IT General Controls (ITGCs), automated controls, application controls, and business process controls
• Support SOX readiness and SOX 404 compliance initiatives, including access management, change management, computer operations, system development lifecycle controls, and risk and control matrices
• Evaluate IT governance structures, policies, third-party risk practices, and controls using frameworks such as COSO, COBIT, and NIST
• Assess cybersecurity governance and risks associated with cloud technologies, artificial intelligence, automation, business continuity, disaster recovery, and other emerging technologies
• Lead client walkthroughs, interviews, meetings, and status discussions while managing engagement timelines, budgets, communications, and reporting deliverables
• Assess technology infrastructure, enterprise applications, and supporting control environments to advise organizations on how they can scale systems, processes, and risk management practices to support business growth, operational resilience, and strategic objectives
• Build trusted client relationships, support engagement planning and quality reviews, and mentor associates and interns

Benefits

• annual bonus
• medical, dental, and vision care
• disability and life insurance
• generous Paid Time Off
• retirement plans
• Paid Care Leave

What This Job Offers

• Job Type: Full-time
• Career Level: Senior