Senior Associate, Information Assurance Services

Summary

Join Aprio's Information Assurance Services team as a Senior Associate and help clients maximize their opportunities. Aprio is a progressive, fast-growing firm with a top-rated culture and vast growth opportunities. You will plan and lead client meetings, develop and perform security testing, and support clients in problem resolution. The role requires performing assessments against leading information security standards and preparing client reporting deliverables. You will also collaborate with team members to improve internal processes and participate in sales and marketing efforts. Aprio offers competitive compensation and benefits, including medical, dental, vision insurance, 401k, paid time off, parental leave, and tuition assistance.

Requirements

• One or more industry relevant certifications or wiliness to obtain relevant certification(s) within two years of employment.  Certifications can include: CEH, CISA, CRISC, CIPP, CISSP, CISM, QSA, ISO/IEC 27001, or PCI ISA
• Undergraduate Degree required: preferably in MIS/IS or related concentration – minimum 3.3 GPA
• 2-4 years relevant work experience
• Strong communication skills; verbal and written, with the ability to produce excellent written reports and audit documentation
• Commitment to continual learning and development
• Commitment to exceptional client service and creative problem-solving ability with a consultancy mindset
• Flexible, self-starter with the ability to interact with various levels of client and firm management
• Understanding of information technology risks and internal controls
• Ability to write test procedures and execute tests of controls
• Understanding of Service Organization Control, PCI, ISO, HITRUST and/or similar information technology control frameworks
• Ability to travel up to 40%
• Ability to manage personal schedule and to lead multiple projects, tasks and deadlines

Responsibilities

• Planning and leading client meetings, walk-through reviews of clients control procedures and processes; delivery and presentation of client deliverables
• Developing and leading the performance of, testing of clients’ security, privacy and other information risk management related controls
• Directing the execution of testing of clients’ internal controls, testing of clients’ internal controls and review of internal control testing executed by other team members
• Supporting clients in problem identification and resolution
• Performing assessments and testing against leading information security and privacy standards and frameworks, including ISO 27001, Trust Services Criteria, PCI DSS, NIST CSF, GDPR, HITRUST and others
• Leading and supporting preparation of client reporting deliverables; e.g., gap and risk assessments, SOC reporting, GDPR assessments, ISO 27001 certifications, etc
• Collaborating with other team members to streamline internal processes and procedures to improve client service and efficiencies
• Participate in meetings with new prospects and/or new service opportunities with existing clients
• Support preparation of sales proposals
• Interviewing potential candidates
• Being a mentor and/or coach to other team members
• Support in the development and delivery of training

Preferred Qualifications

Graduate Degree preferred): preferably in MIS, IS or Accounting Information Systems

Benefits

• Medical, Dental, and Vision Insurance on the first day of employment
• Flexible Spending Account and Dependent Care Account
• 401k with Profit Sharing
• 9+ holidays and discretionary time off structure
• Parental Leave – coverage for both primary and secondary caregivers
• Tuition Assistance Program and CPA support program with cash incentive upon completion
• Discretionary incentive compensation based on firm, group and individual performance
• Incentive compensation related to origination of new client sales
• Top rated wellness program
• Flexible working environment including remote and hybrid options