Director, Technology Risk Consulting - IT Audit

About this role

We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, culture and talent experience and our ability to be compelling to our clients. You’ll find an environment that inspires and empowers you to thrive both personally and professionally. There’s no one like you and that’s why there’s nowhere like RSM.

About the Role RSM has an exceptional career opportunity for a Director to join our Risk Consulting Services practice as part of our Technology Risk Consulting team. This leadership role offers the opportunity to help clients navigate complex technology risks, strengthen governance and controls, and drive business value through effective risk management.

As a Director, you will serve as a trusted advisor to middle market organizations and other complex enterprises, helping leadership teams address technology, cybersecurity, compliance, and operational risks. You will be responsible for leading client engagements, developing talent, cultivating business opportunities, and contributing to the continued growth of a dynamic and collaborative consulting practice.

This role is ideal for an experienced professional who enjoys building strong client relationships, mentoring teams, developing business, and delivering impactful solutions while maintaining a balanced and rewarding career.

What You'll Do • Advise client leadership on the design, enhancement, and optimization of technology and business process controls. • Serve as a trusted advisor on technology risk management, governance, compliance, and emerging technology risks. • Lead teams in evaluating the design and operating effectiveness of information technology controls and identifying opportunities for improvement. • Oversee IT-related support for financial statement audits, SOX compliance programs, and internal audit engagements. • Lead the evaluation and testing of automated application controls and technology-enabled business processes across a variety of ERP platforms and software applications. • Direct SOC attestation and other third-party assurance engagements. • Lead cybersecurity risk management consulting and assessment engagements. • Identify, pursue, and secure new client opportunities through relationship development and market-facing activities. • Manage a diverse portfolio of client engagements while maintaining responsibility for profitability, quality, and risk management. • Provide leadership on proposals, client pursuits, and strategic internal initiatives. • Recruit, develop, mentor, and retain high-performing professionals while fostering an inclusive, collaborative team environment.

Minimum Required Qualifications • Bachelor's or master's degree in business, accounting, management information systems (MIS), computer science, or a related discipline. • Ten years of experience in information technology risk management, internal audit, public accounting, and/or consulting. • One or more professional certifications required, such as: • Certified Public Accountant (CPA) • Certified Information Systems Auditor (CISA) • Certified Information Systems Security Professional (CISSP) • Certified Information Security Manager (CISM) • Certified Information Privacy Professional (CIPP)

Preferred Qualifications • Minimum of eight years of experience within a public accounting or professional services firm. • Experience leading client engagements and managing managers and staff. • Experience managing project financials and delivering engagements within established fees and budgets. • Experience managing, mentoring, and developing professionals while balancing workloads and stakeholder expectations. • Strong understanding of information technology controls and security concepts, including experience with widely used financial applications and ERP systems such as SAP, Oracle, JD Edwards, PeopleSoft, or similar platforms. • Advanced knowledge of relevant regulations, frameworks, and standards, including SOX, AICPA SOC Reporting Standards, COSO, COBIT, FFIEC, ITIL, ISO 27001, PCI, HIPAA, and GLBA. • Demonstrated ability to apply regulatory and control requirements within organizational control frameworks. • Recent success developing new business opportunities and participating in market-facing activities. • Exceptional interpersonal and relationship-building skills. • Advanced written, verbal, and presentation skills, including experience interacting with executive and senior leadership teams. • Ability to travel as needed to serve client needs (estimated 10% to 30%).

At RSM, we offer a competitive benefits and compensation package for all our people. We offer flexibility in your schedule, empowering you to balance life’s demands, while also maintaining your ability to serve clients. Learn more about our total rewards at https://rsmus.com/careers/working-at-rsm/benefits .

All applicants will receive consideration for employment as RSM does not tolerate discrimination and/or harassment based on race; color; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender; sexual orientation; HIV Status; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the US uniformed service; US Military/Veteran status; pre-disposing genetic characteristics or any other characteristic protected under applicable federal, state or local law. 

Accommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/partnership. RSM is committed to providing equal opportunity and reasonable accommodation for people w

Similar jobs

• Senior Director, IT/Technology Audit — Broadridge · New York, NY | Newark, NJ
• Head of Technology Audit — Blackrock · New York, NY
• IT Audit, Cybersecurity & Risk Director — Baker Tilly · USA MA Tewksbury
• Senior Manager, Technology Risk — Upstart · Remote
• Internal Audit Director - Wealth Management, Technology — Morgan Stanley · Baltimore, Maryland, United States
• Head of Technology Risk, Governance, and Controls — Spgi · New York, NY | ENGLEWOOD 15 INVERNESS WAY EAST, CO
• Head of Technology Risk, Governance, and Controls — S&P Global · New York, NY | ENGLEWOOD 15 INVERNESS WAY EAST, CO
• Senior Director, IT Governance, Risk and Compliance — Wwecorp · Remote