Risk Advisory - It Risk Senior Associate
riveron
Job Score
80 ptsIn today’s dynamic environment, business leaders face constantly shifting risks. Riveron helps organizations implement leading governance, risk and compliance practices by combining deep expertise with pragmatic partnership, using a hands-on approach to understand the specific needs of the organization and create tailored solutions to address key compliance risks.
Our Risk Advisory services include SOX readiness, managed internal controls testing and monitoring, co-sourced/outsourced internal audit, segregation of duties and access risk review, policy and procedure development, enterprise risk management, and IT and cybersecurity risk assessment.
The Senior Associate level position for Riveron’s IT Risk Advisory group will work collaboratively with senior team members who provide guidance, coaching, and direction. The role includes assessing the design and operating effectiveness of IT General Controls (ITGC), developing and executing remediation roadmaps, and performing IT risk assessments.
Who You Are:
Bachelor's and/or Master’s degree in Accounting, Finance, Management Information Systems, or another relevant field
Relevant certification preferred, such as CISA, CISSP, CISM, CGEIT, or CIPP; CPA or CIA is also valued but not required
3+ years of experience working as IT auditor or IT risk advisor for a public accounting firm. Experience should include performing internal or external IT audits
Demonstrated knowledge of IT risk management, general and application controls, cybersecurity principles, and regulatory frameworks such as SOX, NIST, or ISO
You have a passion for developing and maintaining client relationships
You get the job done and have fun doing it
You communicate skillfully with a variety of audiences and can create compelling stories from data
You thrive in an ever-changing, dynamic work environment
You readily identify problems and instinctively look for solutions
You enjoy participating in internal and external company initiatives such as community service, training, recruiting, and firm events
You have the ability and desire to travel as required based on client location
What You’ll Do:
Gain an understanding of the assigned clients’ objectives as well as their regulatory and risk management environment
Assist projects in the areas of IT General Control Assessments, Sarbanes-Oxley Compliance, and potentially Cybersecurity Engagements
Utilize existing knowledge of client’s industry and IT environment to identify technological developments to evaluate impacts on the client’s business
Assess internal controls’ design adequacy to mitigate financial, operational, and compliance risks and to test their operating effectiveness
Obtain and analyze data as a basis for reviewing the adequacy, effectiveness, and efficiency of systems and processes
Exhibit proficiency with creating internal controls process flows and risk/control matrices
Maintain the level of technical competency and professional care required for the completion of assignments in accordance with COSO, COBIT, and ISO auditing standards and related control techniques
Set priorities, ensuring daily coordination among the project team, and monitor progress against schedules, budgets, project/task deliverables and status reporting
Plan, review, and provide direction for the work of Staff and Senior Consultants
Communicate extensively with clients to drive expectations and report on the status of ongoing projects
Deliver oral and written presentations during and at the conclusion of projects by either recommending improvements or any operational/financial deficiencies to executive leadership
Stay abreast of emerging risk areas, IT trends, and related control techniques
About Riveron:
At Riveron, we partner with clients—from global multinationals to high-growth private entities—to solve complex finance challenges, guided by our DELTA values: Drive, Excellence, Leadership, Teamwork, and Accountability. Our entrepreneurial culture thrives on collaboration, diverse perspectives, and delivering exceptional outcomes. We are committed to fostering growth, both for our clients and our people, through mentorship, integrity, and a client-centric approach. This inclusive environment offers flexibility, progressive benefits, and meaningful opportunities for impactful work that supports well-being in and out of the office.
Check us out on social media:
LinkedIn Glassdoor Instagram Facebook
Riveron Consulting is an Equal Opportunity Employer and believes that we are stronger together through our diversity. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, disability status, protected veteran status, sexual orientation, gender identity or any other characteristic protected by law.
Full time roles are eligible for a full range of benefits including medical, dental, and vision insurance, 401(k) with company match, and PTO. A complete description of all available benefits can be found at Riveron's Benefits page at https://riveron.com/riveron-life/. Contract roles are not eligible for benefits.
Fraud Alert
Please beware of fraudulent schemes or impersonations when going through the job application process. A Riveron employee will never recruit via text or extend unsolicited employment offers. Additionally, a Riveron employee will never ask you to exchange money or purchase anything as part of the recruiting process.
Artificial intelligence (AI) tools are used to support the hiring process in screening, assessing, and/or selecting applicants for this position. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Discover Other Areas
Understand the scope of work, key skills, and tools used in different career areas.
About Copywriting
The Copywriting area is responsible for creating persuasive, creative, and strategic texts for various communication channels. Copywriting professionals transform ideas into words that engage, convert, and build brand voice.
Key skills include advertising copywriting, script writing for videos and podcasts, persuasive writing, tone of voice, and editorial guidelines. Knowledge of SEO writing, Grammarly, and text productivity tools is a differentiator.
Copywriting professionals in technology companies are highly valued, especially those who master copy for landing pages, email sequences, and funnel content. The field offers opportunities from junior copywriter to head of copy, with a focus on creativity, persuasion, and performance.
About Office Suite
Proficiency in Office Suite is an essential skill for professionals across various areas. Microsoft Excel, Word, PowerPoint, and Outlook are fundamental tools in the corporate day-to-day, while Google Workspace and other collaborative solutions are gaining increasing space.
Key skills include advanced Excel (formulas, pivot tables, Power Query, VBA/Macros), Word (formatting, mail merge, styles), PowerPoint (presentation design, animations), Outlook (email and calendar management), and collaborative tools like Google Sheets, Notion, and Airtable.
Professionals with advanced Office Suite proficiency are valued in administrative, financial, data, and operational areas. Microsoft Office Specialist (MOS) certifications are important differentiators. The combination of advanced Excel with data analysis skills is one of the most in-demand competencies in the market.
About Ecommerce Analyst
The Ecommerce Analyst is the professional responsible for analyzing online sales data, buyer behavior, and virtual store performance to guide strategic decisions. They combine data analysis with ecommerce knowledge to optimize conversion, average order value, and return on investment.
Key skills include Google Analytics (GA4), Hotjar, conversion funnel analysis, cohort analysis, customer segmentation, pricing analysis, and ecommerce metrics (CAC, CLV, AOV, conversion rate). Knowledge of SQL, Power BI, Google Tag Manager, and platforms like Shopify and VTEX is a differentiator.
Ecommerce Analysts in technology companies are highly valued, especially those who can turn buyer behavior data into actionable insights to increase revenue and reduce cart abandonment. The field offers opportunities from junior analyst to ecommerce analytics manager.
About People Analyst
The People Analyst is the professional responsible for transforming people data into strategic insights for HR decision-making. They combine data analysis knowledge with people management vision to help organizations understand workforce metrics, turnover, engagement, and diversity.
Key skills include people analytics, workforce analytics, turnover and retention analysis, HR metrics (time-to-hire, cost-per-hire, e-NPS), data visualization (Power BI, Tableau, Visier), workforce planning, and compensation analysis. Knowledge of statistics, SQL, and people analytics tools is a differentiator.
People Analysts in technology companies are highly valued, especially those who can translate complex people data into actionable insights for retention, diversity, and growth strategies. The field offers opportunities from HR analyst to head of people analytics, with a focus on data-driven people management.
About Product Manager
The Product Manager (PM) is the professional responsible for defining the strategy, vision, and roadmap of a digital product. They work at the intersection of technology, business, and user experience (UX), leading the discovery and delivery of solutions that solve real problems in a viable way for the company.
Key skills include product discovery, data and metrics analysis (AARRR, NPS, LTV), user research, go-to-market strategy, roadmapping, strategic prioritization, and leadership by influence. Tools like Amplitude, Mixpanel, Hotjar, Jira, and Notion are fundamental.
Product Managers play a central role in the growth of startups, scale-ups, and large technology companies, with career progression opportunities to Product Leader, Head of Product, and Chief Product Officer (CPO).