Bough is a decidedly different kind of advisory, assurance, and transformation solutions firm. Working collaboratively with clients in finance, audit, and compliance organizations, we co-create fully integrated and comprehensive solutions that connect people, processes, and technologies to navigate accounting, reporting, and compliance matters. Our services include finance and accounting advisory, revenue assurance, FP&A advisory and support, risk advisory, and process automation and transformation. We are busy and sometimes crazy busy delivering exceptional results to our clients with trust, quality, and humanness. Our name 'Bough' means the main branch of a tree - a name that keeps us grounded in nature and emphasizes our belief that we wish to be the main branch on which our clients and employees lean with trust. For any position we are hiring, we don’t just want you to be an ambitious, analytical, multi-skilled, risk-taking go-getter for Bough. We want you to be more. More for yourself and for anything you undertake. Socially responsible, intuitive, empathetic, trustworthy, thoughtful, imaginative, creative, and curious are some words that resonate with us. Your skills are a qualifier, and we believe that each of us is much more than the skills we bring to our job - the person we are looking for... Role Description: We are building our Risk Advisory practice to help clients address their risk management requirements by providing clear perspectives and critical insights to key stakeholders (e.g., CAEs, audit committees). You’ll be an integral part of this practice—spanning internal controls support, regulatory compliance, SOX, internal audit, risk transformation, technology risk, and more—and should possess excellent skills in risk management, communication, facilitation, relationship-building, and presentation. You will be responsible for delivering insightful and practical solutions to complex client challenges. Key Responsibilities: Lead SOX 404 financial statement mapping, risk assessment, and scoping processes Ensure the appropriateness of internal control documentation for financial processes, including planning documents, narratives, process maps, walkthroughs, and control testing Assist clients across the internal audit and risk management landscape, including internal audit co-sourcing, governance, regulatory compliance, risk transformation, and audit analytics projects Discuss findings and observations with management, including remediation strategies and optimization opportunities Provide client management support and serve as a liaison between client and project teams Assist clients in audit preparation and coordination with external auditors Identify opportunities to leverage data analytics and automation technologies to drive efficiencies and add value to client engagements Participate in recruiting, business development, and knowledge-sharing initiatives Basic Qualifications: For Business Risk Bachelor’s or Master’s degree in Accounting, Finance, Business, or a related field 3+ years of experience in risk management, internal audit, controls, SOX, or regulatory compliance, preferably in a Big 4 or large professional services firm Strong experience auditing business process controls (e.g., Revenue, P2P, O2C, Inventory, Financial Close & Reporting) Familiarity with COSO, SOX, and ICFR frameworks CA, CPA, CIA, or CFE certifications are a plus For IT Risk Bachelor’s or Master’s degree in Information Systems, Security, Computer Science, Engineering, or a related field 3+ years of experience in IT risk, ITGC reviews, SOX IT controls, cyber risk, or regulatory compliance, preferably in a Big 4 or large firm Hands-on experience auditing IT environments (e.g., OS: Windows, Unix/Linux; Databases: Oracle, SQL; ERP: SAP, Oracle—SAP is a strong plus) Familiarity with COBIT, NIST, ISO 27001, and SOC 1/SOC 2 frameworks CISA, CISSP, or related IT risk/security certifications are a plus Preferred Skills: Proven ability to lead client engagements, manage teams, and deliver high-quality, on-time deliverables. Excellent analytical, problem-solving, communication, and interpersonal skills. Strong project management abilities and comfort working with multiple clients and priorities. High attention to detail, with a commitment to continuous learning and professional development. Show more Show less