Director, Technology Risk Consulting - IT Audit

We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled culture and talent experience and our ability to be compelling to our clients. You’ll find an environment that inspires and empowers you to thrive both personally and professionally.

About the Role

RSM has an exceptional career opportunity for a Director to join our Risk Consulting Services practice as part of our Technology Risk Consulting team. This leadership role offers the opportunity to help clients navigate complex technology risks, strengthen governance and controls, and drive business value through effective risk management. As a Director, you will serve as a trusted advisor to middle market organizations and other complex enterprises, helping leadership teams address technology, cybersecurity, compliance, and operational risks. You will be responsible for leading client engagements, developing talent, cultivating business opportunities, and contributing to the continued growth of a dynamic and collaborative consulting practice. This role is ideal for an experienced professional who enjoys building strong client relationships, mentoring teams, developing business, and delivering impactful solutions while maintaining a balanced and rewarding career.

Responsibilities

• Advise client leadership on the design, enhancement, and optimization of technology and business process controls.
• Serve as a trusted advisor on technology risk management, governance, compliance, and emerging technology risks.
• Lead teams in evaluating the design and operating effectiveness of information technology controls and identifying opportunities for improvement.
• Oversee IT-related support for financial statement audits, SOX compliance programs, and internal audit engagements.
• Lead the evaluation and testing of automated application controls and technology-enabled business processes across a variety of ERP platforms and software applications.
• Direct SOC attestation and other third-party assurance engagements.
• Lead cybersecurity risk management consulting and assessment engagements.
• Identify, pursue, and secure new client opportunities through relationship development and market-facing activities.
• Manage a diverse portfolio of client engagements while maintaining responsibility for profitability, quality, and risk management.
• Provide leadership on proposals, client pursuits, and strategic internal initiatives.
• Recruit, develop, mentor, and retain high-performing professionals while fostering an inclusive, collaborative team environment.

Requirements

• Bachelor's or master's degree in business, accounting, management information systems (MIS), computer science, or a related discipline.
• Ten years of experience in information technology risk management, internal audit, public accounting, and/or consulting.
• One or more professional certifications required, such as:
  • Certified Public Accountant (CPA)
  • Certified Information Systems Auditor (CISA)
  • Certified Information Systems Security Professional (CISSP)
  • Certified Information Security Manager (CISM)
  • Certified Information Privacy Professional (CIPP)

Preferred Qualifications

• Minimum of eight years of experience within a public accounting or professional services firm.
• Experience leading client engagements and managing managers and staff.
• Experience managing project financials and delivering engagements within established fees and budgets.
• Experience managing, mentoring, and developing professionals while balancing workloads and stakeholder expectations.
• Strong understanding of information technology controls and security concepts, including experience with widely used financial applications and ERP systems such as SAP, Oracle, JD Edwards, PeopleSoft, or similar platforms.
• Advanced knowledge of relevant regulations, frameworks, and standards, including SOX, AICPA SOC Reporting Standards, COSO, COBIT, FFIEC, ITIL, ISO 27001, PCI, HIPAA, and GLBA.
• Demonstrated ability to apply regulatory and control requirements within organizational control frameworks.
• Recent success developing new business opportunities and participating in market-facing activities.
• Exceptional interpersonal and relationship-building skills.
• Advanced written, verbal, and presentation skills, including experience interacting with executive and senior leadership teams.
• Ability to travel as needed to serve client needs (estimated 10% to 30%).

Benefits

At RSM, we offer a competitive benefits and compensation package for all our people. We offer flexibility in your schedule, empowering you to balance life’s demands while maintaining your ability to serve clients. Learn more about our total rewards.

Pay

Compensation Range: $126,500 - $254,700. Individuals selected for this role will be eligible for a discretionary bonus based on firm and individual performance.