Risk Advisory - Associate Director (IT Risk)

Remote: yes Posted: 2026-10-02

In today’s dynamic environment, business leaders face constantly shifting risks. Riveron helps organizations implement leading governance, risk and compliance practices by combining deep expertise with pragmatic partnership, using a hands-on approach to understand the specific needs of the organization and create tailored solutions to address key compliance risks.

Our Risk Advisory services include SOX readiness, managed internal controls testing and monitoring, co-sourced/outsourced internal audit, segregation of duties and access risk review, policy and procedure development, enterprise risk management, and IT and cybersecurity risk assessment.

The Associate Director position for Riveron’s IT Risk Advisory group will be the day-to-day lead for consulting engagements working collaboratively with senior team members who provide guidance, coaching, and direction. Associate Directors are expected to conduct the majority of day-to-day project management activities on all of their engagements, including project plan development, reviewing staff work for quality, status updates to clients and internal management, and mentoring of staff and senior consultants.

- Gain an understanding of the assigned clients’ business objectives, IT environment, and applicable regulatory and risk management landscape

- Lead projects in the areas of IT General Controls (ITGC) assessments, Sarbanes-Oxley (SOX) IT compliance, ERP/application control reviews, and cybersecurity risk assessments

- Leverage knowledge of industry-specific systems, applications, and infrastructure to identify technology risks and evaluate their impact on business and financial reporting

- Assess the design and operating effectiveness of IT controls related to access management, change management, system operations, and data integrity

- Obtain and analyze system-generated data, configurations, and logs as a basis for evaluating control environments and identifying gaps

- Demonstrate proficiency in developing IT control process flows, risk/control matrices, and testing strategies for general and automated application controls

- Maintain the level of technical competency and professional care required for the completion of assignments in accordance with COSO, COBIT, and ISO auditing standards and related control techniques