IT Risk Controls & Compliance, Senior Associate

As a member of the Risk Consulting service line, you will have the unique opportunity to learn about the inner workings of the firm and the underlying technologies that are used to support the firm’s execution of audit and assurance engagements. You will work closely with quality management leaders, methodology teams, technology component owners, and subject matter specialists to support the firm's compliance with professional standards and quality management requirements. Your work will help ensure that technology resources — including software audit tools, AI-enabled capabilities, and supporting platforms — are appropriately governed and aligned with the firm's quality objectives. This role is ideal for professionals who enjoy combining technology, risk management, governance, and continuous improvement to drive quality across an entire practice. Rather than focusing primarily on executing audits, your role will center on optimizing internal processes, while mastering and designing IT general controls and automated control design, and driving digital governance across the practice.

Responsibilities:

Support the design, implementation, operation, and continuous enhancement of the firm’s System of Quality Management as it relates to technology resources.

Assist in establishing audit quality objectives, identifying and assessing quality risks, and designing and implementing technology-related responses and controls to address those quality risks

Advise on the creation of control documentation, including IT process narratives, risk and control matrices, and control operation documentation to enhance the firm’s IT internal control environment

Support technology risk assessments and reviewing, documenting, evaluating control’s design and operating effectiveness

Use problem solving and critical thinking skills to quickly identify internal control deficiencies, evaluate their risk implications, and draw the appropriate conclusions to best advise our internal stakeholders

Exercise professional skepticism, judgment and adhere to the code of ethics while on projects

Work collaboratively as a part of the team and communicate effectively with RC Standards and Quality team members on a daily basis

Manage multiple concurrent projects and ensure service excellence through prompt responses to internal stakeholders

Provide timely, high-quality service that meets or exceeds expectations including coordinating the development and execution of the project work plan and internal deliverables

The Risk Controls & Compliance, Senior Associate is expected to spend the majority of their time on projects related to RSM’s system of quality management. Team members may be requested to support methodology related efforts during any downtime. These efforts may include:

Updating methodology, guidance and tools related to RC services

Authoring articles and trainings on emerging internal control issues, and/or contributing to the development guides, practice aids, and whitepapers

Required Qualifications:

Bachelor’s degree or equivalent experience in Information Technology, Management Information Systems (MIS), Accounting Information Systems, Business Administration, Accounting or a related field.

Strong critical thinking, professional skepticism, and problem-solving skills with a passion for internal control design and operational excellence.

Preferred Experience & Technical Skills:

1 Year of relevant work experience in a governance, risk and compliance function

Experience or strong foundational knowledge in IT General Controls (ITGCs), IT Automated Controls, Information Security frameworks (COBIT, NIST, ISO 27001, ITIL), and internal risk management.

Proficiency in MS Visio (or similar tools) to develop clear process and data flow diagrams.

Advanced Excel skills (pivot tables, VLOOKUPs, data analysis) along with strong PowerPoint and Word skills for authoring technical guidance and presentations.

Qualified to pursue or currently holding job-relevant certifications such as CISA, CISM, CRISC, or CISSP.

Exceptional verbal and written English communication skills, with the ability to translate complex technical IT controls into clear, educational guidance for internal teams and global stakeholders.

At RSM, we offer a competitive benefits and compensation package for all our people.  We offer flexibility in your schedule, empowering you to balance life’s demands, while also maintaining your ability to serve clients.  Learn more about our total rewards at https://rsmus.com/careers/working-at-rsm/benefitshttps://rsmus.com/careers/el-salvador.html.

RSM does not tolerate discrimination and/or harassment based on race; colour; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender (including gender identity and/or gender expression); sexual orientation; HIV Status; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the Salvadoran Military/Veteran status; pre-disposing genetic characteristics or any other characteristic protected under applicable provincial employment legislation.

Accommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/partnership. RSM is committed to providing equal opportunity and reasonable accommodation for people with disabilities. If you require a reasonable accommodation to complete an application, interview, or otherwise participate in the recruiting process, please send us an email at careers@rsmus.com.