Supervisor, Technology Risk Consulting - SOC and IT Audit (Financial Services Industry)

We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, culture and talent experience and our ability to be compelling to our clients. You’ll find an environment that inspires and empowers you to thrive both personally and professionally. There’s no one like you and that’s why there’s nowhere like RSM. As an experienced professional in RSM’s growing Technology Risk Consulting, you will have the opportunity to develop into a seasoned consultant through a high degree of client and industry exposure, career development and mentorship opportunities, and a diverse and inclusive culture. The fast-paced and dynamic environment in which we operate will provide you with daily challenges and exciting opportunities.   In the Technology Risk Consulting Practice, our consultants help our clients with the design and optimization of controls utilizing a general knowledge of business processes, accounting, and information technologies by identifying and prioritizing risk and transform their technology risk management and assurance capabilities to be aligned to the key risks and strategies of their organization.   Responsibilities:   Develop an understanding of the RSM Technology Risk Consulting approach, methodology and tools   Develop an understanding of the Industry leading frameworks and methodologies for Sarbanes-Oxley, COBIT, NIST and ITIL   Demonstrate understanding of business processes, internal control risk management, IT controls, and related regulatory and compliance standards   Perform technology risk assessments and reviewing, documenting, evaluating control’s design and operating effectiveness, IT internal audit consulting activities (internal audits over ERP systems, IT security, and other IT systems)   Perform external audit assurance activities, and perform service organization control services activities related to SSAE18 SOC 1 and SOC 2 reporting services   Performing risk analysis by reviewing the information security policy documents against industry standards/ regulatory requirements and drafting risk reports, which summarize the information security assessment including any risks to the organization   Perform first level review of associates work for accuracy, completeness, and well-reasoned conclusions   Review and complete status documents for client delivery   Use problem solving and critical thinking skills to quickly identify internal control deficiencies, evaluate their risk implications, and draw the appropriate conclusions to best advise our clients   Exercise professional skepticism, judgment and adhere to the code of ethics while on engagements   Ensure that documentation is compliant with quality standards of the firm   Work collaboratively as a part of the team and communicate effectively with RSM consulting professionals, supervisors, and senior management on a daily basis   Manage multiple concurrent engagements and ensure service excellence through prompt responses to internal and external clients   Provide timely, high quality client service that meets or exceeds client expectations including coordinating the development and execution of the consulting work plan and client deliverables   Ensure professional development through ongoing education   Qualifications:   Bachelor’s or Master’s Degree in business, management information systems, computer and information science, accounting or related discipline with minimum of 3-5 Years of relevant experience in Information   Technology/Security Controls, SSAE 18, SOC reports, IT Audits, IT General Controls, IT Application Controls and ERP Audits.   Candidate should have intermediate knowledge of financials, operations and technology and its related risks   Candidate should have good knowledge for SOC 1, SOC 2, ICFR, IT General Controls, IT Application Controls, Information security and risk management frameworks/ standards (ISO 27001, NIST, COBIT, ITIL, PCI.)   Qualified to pursue a job-relevant certification (CISA, CISM, CRISC, CISSP)   Strong Data Analytical skills including advanced Excel skills (VLOOKUP's, pivot tables, and basic formulas), Word and PowerPoint   MS Visio skills to develop process and data flow diagrams   Strong multi-tasking and project management skills   Excellent verbal and written communication     Preferred Qualifications: Strong understanding of information technology controls and security experience in a widely used financial application (SAP, Oracle, JD Edwards, PeopleSoft, etc.)    Experience within the financial services industry highly preferred Professional certification: Certified Public Accountant (CPA), Certified Information Systems Auditor® (CISA®), Certified Information Systems Security Professionals® (CISSP®), Certified Information Security Manager® (CISM®) and/or Certified Information Privacy Professional (CIPP) At RSM, we offer a competitive benefits and compensation package for all our people. We offer flexibility in your schedule, empowering you to balance life’s demands, while also maintaining your ability to serve clients. Learn more about our total rewards at https://rsmus.com/careers/working-at-rsm/benefits . All applicants will receive consideration for employment as RSM does not tolerate discrimination and/or harassment based on race; color; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender; sexual orientation; HIV Status; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the US uniformed ser