Risk Assurance Senior

BPM LLP

5d•Hybrid

About The Position

As a Risk Assurance Senior, you will play a key role in executing and coordinating assurance engagements, supporting clients through complex business and IT risk and compliance initiatives, and mentoring junior team members. You will work closely with managers and client personnel to deliver high-quality solutions across SOX, SOC and IT audit engagements. Working with BPM means using your experiences, broadening your skills, and reaching your full potential in work and life—while also making a positive difference for your clients, colleagues, and communities. Our shared entrepreneurial spirit drives us to see and do things differently. Our passion for people makes BPM a place where everyone feels welcome, valued, and part of something bigger. Because People Matter.

Requirements

Bachelor's degree in Information Systems, Accounting, Computer Science, or a related field.
2–5 years of experience performing IT audits, SOC examinations, SOX compliance, or risk assurance engagements in public accounting or consulting.
Strong understanding of SOC 1, SOC 2, and SOX frameworks, including ITGCs, ITACs, automated controls, business process controls, and third-party risk considerations.
Ability to independently manage multiple assignments and prioritize competing deadlines.
Excellent analytical, problem-solving, and critical-thinking skills.
Strong verbal and written communication skills with the ability to interact effectively with client management and engagement teams.
Ability to synthesize research into clear, thoughtful, and actionable deliverables.

Nice To Haves

Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP) and/or CPA license are preferred.
Experience with ERP systems, cloud environments (Azure, AWS, GCP), and cybersecurity concepts is preferred.

Responsibilities

Lead and perform IT General Controls (ITGC), IT Application Controls (ITAC), and automated controls testing for SOX compliance engagements.
Perform audit activities, including walkthroughs through report preparation, for SOC 1 and SOC 2 engagements and SOX compliance, ensuring timely deliverables.
Prepare and review workpapers, testing documentation, narratives, flowcharts, and risk and control matrices (RCMs).
Perform testing and review and provide technical expertise to clients and engagement team members.
Mentor, coach, and review the work of Associates and interns, providing constructive feedback and guidance.
Contribute to practice development initiatives, including methodology enhancements, training, and recruiting.