IT Audit Supervisor

RSM has an exceptional career opportunity available for an experienced Risk Advisory Services – Systems and Process Assurance Supervisor in our Kansas City, MO office. 

Our systems and process assurance Supervisor are those seeking career growth, management, and accelerated leadership opportunities for an exciting, growing consulting practice. They are professionals who appreciate the ability to aggressively pursue their career goals while being provided the opportunity to experience a rewarding work-life balance.

Our clients depend upon effective risk management, internal audit, and governance over their enterprise- wide information technology in order to achieve their business objectives. Our Risk Advisory Services Systems and Process Assurance (SPA) professionals serve complex global clients aspiring to help transform their IT risk management and assurance capabilities to be aligned to the key risks and strategies of their organization. We work with large and middle market clients across a wide variety of industries developing strong working relationships with clients built on understanding their businesses, their challenges, risks, and information technology (IT) requirements.

The Supervisor will be an integral team leader by assisting associates in planning engagements, conducting fieldwork, supervising staff, discussing findings and observations during client exit meetings, preparing work papers to support conclusions, reviewing staff work papers, and preparing written attestation reports. The candidate should have a strong level of knowledge of financial, operational, and/or information technology, internal controls, identifying risks and related controls, as well as performing test work of identified significant controls. The candidate should also be capable of conducting audit and attestation engagements independently and in-charging an engagement team. 

Major Duties and Responsibilities: 

• Consulting with client leadership on the design and optimization of controls utilizing a general knowledge of business processes, accounting, and information technologies.  Create internal control documentation for the engagement including narratives, process and data flows;

• Consulting with client leadership on strategic plans and other business matters, helping our clients to anticipate emerging risks and information technology opportunities;

• Performing and delivering SOC attestation and other third-party opinion services;

• Supervise teams during fieldwork, including monitoring and supporting their work activities

• Responsible for timely communications to RSM leadership and clients on progress of client engagements

• Supporting external financial statement and SOX compliance engagements for application and information technology general computer controls assisting financial audit and Sarbanes-Oxley compliance teams in the identification of control objectives and the design of control procedures to address those objectives;

• Assessing IT security policies, procedures, and controls of our clients’ business applications, networks, operating systems, and other components of their technology infrastructure;

• Reviewing, documenting, evaluating and testing application controls, particularly automated controls on a wide range of ERP systems and software applications across a wide variety of client business processes;

• Identifying internal IT controls, assessing their design and operational effectiveness, determining risk exposures and developing remediation plans and determining technical and business impact of identified security and control issues and providing remediation guidance to clients;

• Communicating findings and recommendations to client personnel;

• Helping grow RSM’s business through involvement in various business development and client sales opportunities.

Qualifications:

• Bachelor’s degree in accounting, MIS or related field

• CPA or CPA candidate

• Minimum 3 years of experience with assurance/audit within a public accounting firm, risk advisory services or internal audit 

• Good understanding of relevant regulations and industry standards (e.g., FFIEC, SOX, COSO, COBIT, ITIL, ISO27001, PCI, HIPAA, GLBA and NIST) and best practices and methodologies to address these requirements. Ability to apply these requirements to organizational internal control frameworks

• Ability to travel 40% throughout Missouri, Kansas or Iowa

Preferred Qualifications: 

• Excellent organizational skills and the ability to prioritize multiple tasks, projects and assignments

• Ability to interact with all levels including executives and senior managers