TRC ITGC - SOX - Senior Associate

Risk Consulting helps clients across various industries by addressing the increasingly complex strategic, operational, compliance, and governance challenges faced by those responsible for managing or overseeing dynamic businesses. Risk Consulting major offerings includes AML & Regulatory Compliance; ERP Advisory; Automation and Analytics; Enterprise Risk Management; Internal Audit; SOX Advisory; Contract Compliance; Credit Reviews; Information & Technology Audits; Cybersecurity risk management; Third-party risk management; IT due diligence; SOC1 / SOC2; Security and Privacy Risk; Governance Risk and Compliance; PCI; Cyber Transformation; Manage Security Services; Secure Architecture Solutions; Cyber Testing; Digital Forensics and Incident Response; and Cyber Threat Intelligence.

Qualification and Minimum Entry Requirements

• B.Tech/MCA/MBA with 3 – 5 Years of relevant experience in Information Technology/Security Controls, SSAE 18, SOC reports, IT Audits, IT General Controls, IT Application Controls and ERP Audits.
• Candidate should have intermediate knowledge of financials, operations and technology and its related risks
• Candidate should have good knowledge for SOC 1, SOC 2, ICFR, IT General Controls, IT Application Controls, Information security and risk management frameworks/ standards (ISO 27001, NIST, COBIT, ITIL, PCI.)
• Qualified to pursue a job-relevant certification (CIA, CISA, CMA, ISO, CRISC, CISSP)
• Strong Data Analytical skills including advanced Excel skills (VLOOKUP's, pivot tables, and basic formulas), Word and PowerPoint
• MS Visio skills to develop process and data flow diagrams
• Strong multi-tasking and project management skills
• Excellent verbal and written communication (English) as this a client facing role and it requires frequent communications with RSM International clients.
• Preferred Degrees:

B.Tech / B.Sc / BCA

B.Com (Hons) / CA / CPA

MBA – IT / PG – IT or Risk

Position and Key Responsibilities

• Develop an understanding of the RSM Technology Risk Consulting approach, methodology and tools
• Develop an understanding of the Industry leading frameworks and methodologies for Sarbanes-Oxley, COBIT, NIST and ITIL
• Demonstrate understanding of business processes, internal control risk management, IT controls, and related regulatory and compliance standards
• Perform technology risk assessments and reviewing, documenting, evaluating control’s design and operating effectiveness, IT internal audit consulting activities (internal audits over ERP systems, IT security, and other IT systems), perform external audit assurance activities, and perform service organization control services activities related to SSAE18 SOC 1 and SOC 2 reporting services
• Performing risk analysis by reviewing the information security policy documents against industry standards/ regulatory requirements and drafting risk reports, which summarize the information security assessment including any risks to the organization
• Perform first level review of associates work for accuracy, completeness, and well-reasoned conclusions
• Review and complete status documents for client delivery
• Execute components of IT audits under offshore delivery model in an effective and efficient manner
• Use problem solving and critical thinking skills to quickly identify internal control deficiencies, evaluate their risk implications, and draw the appropriate conclusions to best advise our clients
• Exercise professional skepticism, judgment and adhere to the code of ethics while on engagements
• Ensure that documentation is compliant with quality standards of the firm
• Work collaboratively as a part of the team and communicate effectively with RSM consulting professionals, supervisors, and senior management in the U.S. on a daily basis
• Manage multiple concurrent engagements and ensure service excellence through prompt responses to internal and external clients
• Provide timely, high quality client service that meets or exceeds client expectations including coordinating the development and execution of the consulting work plan and client deliverables
• Understand RSM US and RSM Delivery Center's LOB’s and work as a team in providing an integrated service delivery
• Ensure professional development through ongoing education