Senior Audit Manager - Cyber Security

RS Assurance & Advisory•Southlake, TX

11h•$175,000 - $225,000•Hybrid

About The Position

This is not a traditional 40-hour-per-week management position. The successful candidate will be expected to roll up their sleeves, perform testing, lead engagements, build processes, develop people, and own the growth and quality of their service lines. This is a high-autonomy leadership role with the potential to grow into a Partner-level position at RSAA. The Senior Audit Manager will have ownership of RSAA's assurance and compliance service lines, including the development, delivery, quality, and growth of services across multiple frameworks. The ideal candidate is a CPA and seasoned assurance professional who also possesses strong cybersecurity and information-security credentials. You should be equally comfortable leading a room full of executives, performing hands-on testing, reviewing workpapers, building SOPs, managing client relationships, coaching and challenging team members, discussing technical controls with security professionals, discussing business risk with executives, selling 500K–1M+ of professional services, and working independently with minimal supervision. You will be expected to bring an "own it" mentality to the role.

Requirements

7+ years of relevant professional experience in assurance, audit, compliance, cybersecurity, risk, or a closely related field.
Significant experience leading client-facing assurance or compliance engagements.
Demonstrated experience managing complex projects and client relationships.
Experience working across multiple cybersecurity or compliance frameworks.
CPA is required.
Candidates should also possess multiple relevant professional certifications, with a strong preference for combinations such as: CPA, CISA, CISSP, ISO 27001 Lead Auditor / Lead Implementer, ISO 9001 Lead Auditor / Lead Implementer, ISO 42001 credentials, Other recognized cybersecurity, audit, or compliance certifications.
The ideal candidate will demonstrate breadth across accounting, audit, cybersecurity, information security, and ISO standards.
Takes ownership.
Works independently.
Does not need to be micromanaged.
Is comfortable making decisions.
Has a strong sense of urgency.
Can manage competing priorities.
Is willing to get into the details.
Will roll up their sleeves when an engagement requires it.
Is comfortable being accountable for results.
Can lead experienced professionals.
Is comfortable challenging clients when necessary.
Enjoys building things from the ground up.
Has an entrepreneurial mindset.
Wants to build something larger than their individual role.
Must be comfortable with client deadlines, multiple concurrent engagements, business-development responsibilities, travel, quality reviews, occasional extended workdays, and high levels of accountability.
Approximately 10–25% travel per month, depending on client requirements and business-development activities.
Meaningful knowledge of AI and emerging technology, including an understanding of how organizations should approach AI governance, AI risk management, AI controls, Responsible AI, AI security, AI-related compliance requirements, ISO/IEC 42001, and the impact of AI on assurance and cybersecurity.

Nice To Haves

Remote considered for exceptional candidates.
Hands-on experience implementing or assessing AI governance programs is strongly preferred.
CISA
CISSP
ISO 27001 Lead Auditor / Lead Implementer
ISO 9001 Lead Auditor / Lead Implementer
ISO 42001 credentials
Other recognized cybersecurity, audit, or compliance certifications.

Responsibilities

Own and maintain RSAA's internal SOC 2 peer-review and quality processes.
Oversee quality and consistency of assurance engagements.
Perform and review testing across multiple cybersecurity, compliance, and assurance frameworks.
Establish and maintain testing methodologies, workpaper standards, review procedures, and quality controls.
Ensure engagements are performed consistently, efficiently, and in accordance with applicable professional and industry standards.
Identify opportunities to "test once, certify twice" by leveraging common controls and evidence across multiple frameworks.
Continuously improve RSAA's approach to integrated testing and multi-framework assessments.
Take leadership responsibility for RSAA's ISO-related service offerings, including ISO 9001, ISO/IEC 27001, ISO/IEC 42001, and other relevant ISO standards and assurance frameworks.
Develop and maintain service-line methodologies.
Create and maintain SOPs.
Establish testing procedures and templates.
Develop engagement approaches and delivery standards.
Train and mentor consultants.
Review engagement quality.
Identify opportunities for service-line expansion.
Stay current on changes to applicable standards and certification requirements.
Personally participate in testing and assessments when necessary rather than simply managing from a distance.
Review evidence, test controls, conduct interviews, perform walkthroughs, document findings, challenge control owners, write assessment reports, review remediation, perform quality reviews, and support complex client engagements.
Have a meaningful role in growing RSAA's assurance and compliance practice.
Identify opportunities within existing accounts.
Develop relationships with prospective clients.
Lead discovery and scoping conversations.
Present RSAA's capabilities to executive stakeholders.
Develop proposals and statements of work.
Support pricing and engagement strategy.
Expand existing client relationships.
Partner with RSAA leadership on strategic accounts.
Build a sustainable pipeline for the service lines you own.
Build the infrastructure necessary to scale your service lines.
Create standardized methodologies.
Build engagement templates.
Create testing programs.
Develop quality-control procedures.
Establish training materials.
Create repeatable delivery processes.
Identify opportunities for automation.
Improve engagement margins.
Build scalable service offerings.
Establish strong ownership of RSAA's assurance service lines within the first 12-24 months.
Improve and standardize testing methodologies within the first 12-24 months.
Strengthen SOC 2 peer-review processes within the first 12-24 months.
Build and document service-line SOPs within the first 12-24 months.
Expand RSAA's ISO capabilities within the first 12-24 months.
Improve the ability to leverage common controls across multiple frameworks within the first 12-24 months.
Develop new client relationships within the first 12-24 months.
Generate meaningful new revenue within the first 12-24 months.
Build a scalable delivery within the first 12-24 months.