Manager, Risk and Compliance
About The Position
The Manager of Risk & Compliance supports Assurance Digital by executing certification and compliance activities for products and platforms under established standards and guidance. The role prepares certification artifacts, supports risk assessments, collects and validates evidence, and helps ensure release readiness. Working with product, engineering, and delivery teams, the Manager provides hands-on risk and compliance support and helps address issues as they arise. The role emphasizes high-quality, inspection-ready documentation and escalation of complex matters to senior leaders as needed. The position also supports compliance governance forums, audit and inspection requests, peer reviews, and internal oversight activities. RSM describes most roles as following a hybrid workstyle, with team members aligned to an RSM office and meeting in person when it best supports clients, teams, development, or relationship-building; some roles may be virtual or primarily onsite based on requirements and priorities.
Requirements
- Bachelor’s degree in accounting, Information Systems, Business, Computer Science, or a related field.
- At least 5 years of experience.
- Experience with privacy/data protection impact assessments and related process and security-control concepts.
- Familiarity with SOC 1/SOC 2 reporting concepts.
- Knowledge of external audit workflows and the importance of audit quality, documentation, and evidence.
- Experience working with IT control frameworks such as COSO, COBIT, or ITIL, and common technology risk concepts.
- Experience partnering with product or technology teams to clarify requirements, obtain evidence, and drive follow-through on remediation actions.
Nice To Haves
- CPA, CISA, CRISC, AIGP, AAIR, AAISM, or similar certification.
- Exposure to cloud environments such as Azure, AWS, or GCP and related control considerations.
- Exposure to data and AI governance, model risk management frameworks, or emerging technology compliance.
Responsibilities
- Execute certification activities for Assurance Digital products and platforms under established standards and guidance.
- Prepare certification artifacts, including procedures performed, evidence collection, conclusions, and draft release recommendations.
- Support pre-release readiness and post-release follow-up activities.
- Support risk assessments for new products, enhancements, and material changes, including documenting risks and proposed mitigations.
- Track risk treatment actions and remediation items through completion, escalating issues as needed.
- Produce and maintain required documentation and evidence in accordance with defined templates and minimum standards.
- Quality-check evidence and certification materials for completeness, accuracy, and inspection readiness.
- Maintain certification records, findings logs, and evidence repositories.
- Partner with product, engineering, and delivery teams to gather inputs, clarify requirements, and support compliance activities.
- Serve as a day-to-day Risk & Compliance contact for assigned initiatives and escalate complex issues to Associate Directors or Directors.
- Support compliance governance forums by preparing materials, reporting status, tracking actions, and following up.
- Assist with audit, inspection, peer review, and internal oversight requests.
- Perform other duties as assigned.
Benefits
- Competitive benefits and compensation package.
- Eligible for a discretionary bonus based on firm and individual performance.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Manager
