Governance, Risk, and Compliance Senior Associate, IT Controls & Assurance
Weaver · NY, US
18 days agoImpress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Governance, Risk, and Compliance Senior Associate, IT Controls & Assurance role.
Rezi rewrites your resume against Weaver's job description. Free.

Tailor your resume to this Governance, Risk, and Compliance Senior Associate, IT Controls & Assurance role.
Rezi rewrites your resume against Weaver's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Governance, Risk, and Compliance Senior Associate, IT Controls & Assurance posting at Weaver — free, in seconds.

Don't guess if your resume is good enough.
See how it scores against the Governance, Risk, and Compliance Senior Associate, IT Controls & Assurance posting at Weaver — free, in seconds.
About the Role
Weaver is seeking a Senior Associate for its Governance, Risk, and Compliance (GRC) practice, focusing on IT controls and technology assurance. This role supports SOC examinations, IT-related SOX compliance, and information security projects. The GRC IT team collaborates with various stakeholders to evaluate controls, provide recommendations, and deliver client service, offering exposure to diverse industries and technologies while developing technical and engagement-management skills.
Responsibilities
- Execute and help manage SOC 1 and SOC 2 Type 1 and Type 2 examinations, including planning, walkthroughs, risk assessment, control evaluation, testing, documentation, issue evaluation, and report support.
- Perform IT SOX work over in-scope systems and processes, including IT general controls, automated controls, key reports, interfaces, and other technology-dependent controls relevant to internal control over financial reporting.
- Develop and maintain risk and control matrices (RCMs) during engagement planning, documenting processes, identifying risks, mapping controls, and defining testing procedures.
- Evaluate control design and operating effectiveness across logical access, change management, computer operations, cybersecurity, incident management, business continuity, vendor management, and related domains.
- Develop and review process narratives, system descriptions, risk and control matrices, test plans, workpapers, evidence requests, and client-ready deliverables.
- Identify exceptions and control gaps, assess their significance, and communicate clear, practical recommendations to engagement leadership and client stakeholders.
- Coordinate day-to-day client requests, monitor engagement status and budgets, escalate risks promptly, and help keep concurrent projects on schedule.
- Supervise and coach Associates by reviewing workpapers, providing timely feedback, and reinforcing firm methodology and quality expectations.
- Support other technology risk, information security, and compliance engagements, which may include readiness assessments, internal audit, regulatory compliance, or controls advisory projects.
- Contribute to practice development through methodology improvements, knowledge sharing, proposal support, and participation in recruiting and team initiatives.
Requirements
- Bachelor’s degree in Accounting, Management Information Systems, Computer Science, or related field
- 2+ years of experience in professional services or similar field
- Working knowledge of SOC reporting concepts and applicable attestation standards, including experience supporting SOC 1 and/or SOC 2 engagements
- Understanding of SOX Section 404, internal control over financial reporting, and how technology risks and controls affect financial reporting
- Ability to understand business and financial reporting processes, identify relevant technology risks, and connect IT controls to business, reporting, and security objectives
- Experience reviewing workpapers and supervising, coaching, or informally leading junior team members
- Strong written and verbal communication skills, including the ability to explain technical control matters to both technical and nontechnical stakeholders.
- Strong organization, attention to detail, professional skepticism, and the ability to manage multiple priorities and deadlines
- Ability to appropriately use firm-approved AI and automation tools while maintaining confidentiality, professional judgment, quality-control requirements, and compliance with firm policies
- Ability to travel to client locations or Weaver offices as engagement needs require.
Skills
- SOC reporting concepts
- Attestation standards
- SOX Section 404
- Internal control over financial reporting
- Technology risks and controls
- Business and financial reporting processes
- IT controls
- AI and automation tools
- Written communication
- Verbal communication
- Organization
- Attention to detail
- Professional skepticism
- Managing multiple priorities
- Deadline management
Location
- Client locations
- Weaver offices
Work Type
- Full-time
- Travel required
Experience Level
- Senior Associate
- 2+ years of experience
Education Level
- Bachelor's degree
Salary/Compensations
- $90,000 to $110,000
Benefits
- Medical insurance
- Dental insurance
- Vision insurance
- Disability insurance
- Life insurance
- 401(k) plan
- Flexible scheduled time off (STO)
- Minimum of 56 hours of sick and safe leave
- 11 holidays
- 2 scheduled recharge days
- In-house CPE
- Learning opportunities through internal Learning & Development department
About the Company
- Weaver is a full-service national accounting, advisory and consulting firm.
- We seek to bring a human element to the world of accounting, creating a diverse, collaborative, and entrepreneurial workplace culture.
- Our leaders care about employee well-being and encourage professional ambitions.
- Our success is based on people, supporting professional growth and balanced lives.
- Weaver's core values empower people to deliver extraordinary service and be their best selves.
- Our goal is to balance high development with high performance.
Equal Opportunity
- We are proudly an equal opportunity employer.
- We cultivate a safe and inclusive work environment that celebrates each individual’s unique qualities through visibility, progression, advocacy, and support.