Risk Advisory Analyst

Abacus Technologies - Risk Advisory Services

As a Risk Advisory Analyst, your role will encompass both the execution of projects and the provision of client services, with a primary emphasis on assisting in SOC 1/SSAE 18 and SOC 2 audits. Additionally, your responsibilities may extend to aiding in assessments related to ISO, PCI DSS, and HIPAA. This position offers the chance to acquire diverse project experience by working with a broad spectrum of clients, from emerging start-ups to established enterprise-level organizations, across multiple industry sectors.

Qualifications

• Graduate or Undergraduate Accounting, Computer Information Systems, Computer Science
• Exceptional communication skills, both verbal and written
• Experience in testing the design and/or effectiveness of controls.
• Currently a candidate to achieve CISA, CPA or other relevant risk-based certification.
• Ability to work on-site at client locations, including occasional travel.

Experience

• Relevant experience is Public Accounting, Corporate Accounting, Risk Management through internship or co-op.
• Knowledge of SOC 1/SSAE 18 and SOC 2 standards, HIPPA, ISO 27001

Responsibilities

• Evaluate the design and operating effectiveness of technology controls pertaining to client's internal controls.
• Understand information technology controls, concepts, and auditing.
• Discuss with clients the risks from their use of technology and identify control gaps within processes.
• Perform SOC 1 and SOC 2 examinations and understand audit guidelines.
• Communicates engagement status and issues to team members.
• Identify control gaps and communicate audit findings and control redesign recommendations.
• Assist on various IT-related Audit and Accounting related tasks for client engagements.
• Perform audit testing for SOC 1/SSAE 18, SOC 2, SOC 3, and HIPAA engagements.
• Prepare agendas (e.g. planning, fieldwork, closing, etc.) and client request lists.
• Lead client meetings and maintain client relationships.
• Monitor evidence collection process.
• Review evidence and provide feedback to clients.
• Address and respond to client questions.
• Document evidence in supporting audit workbooks.
• Communicate engagement status to management, including escalating any potential issues.