IT Risk Controls & Compliance Senior Associate

About the role

As an IT Risk Controls & Compliance Senior Associate at RSM, you will influence the quality, governance, and effectiveness of technology resources used in audits. You will work within the Risk Consulting Standards and Quality team to design, implement, and monitor IT controls that support the firm’s quality management system.

Key responsibilities

• Support the design, implementation, operation, and continuous enhancement of the firm’s System of Quality Management as it relates to technology resources.
• Assist in establishing audit quality objectives, identifying quality risks, and designing technology‑related controls to address those risks.
• Create and maintain control documentation such as IT process narratives, risk and control matrices, and control operation documentation.
• Conduct technology risk assessments, evaluate control design and operating effectiveness, and advise internal stakeholders on deficiencies.
• Collaborate daily with the RC Standards and Quality team, manage multiple concurrent projects, and ensure timely, high‑quality service delivery.

Required profile

• Bachelor’s degree or equivalent experience in IT, MIS, Accounting Information Systems, Business Administration, Accounting or a related field.
• At least 1 year of experience in a governance, risk and compliance function with a strong foundation in IT General Controls and information‑security frameworks.
• Professional skepticism, critical thinking, and strong problem‑solving abilities.
• Excellent verbal and written English communication skills.

Required skills

• Knowledge of IT General Controls (ITGCs) and IT Automated Controls.
• Familiarity with frameworks such as COBIT, NIST, ISO 27001, and ITIL.
• Proficiency in MS Visio for process and data‑flow diagrams.
• Advanced Excel (pivot tables, VLOOKUP, data analysis) and strong PowerPoint and Word skills.
• Relevant certifications (CISA, CISM, CRISC, CISSP) are preferred.