Governance, Risk, and Compliance Associate - IT

Weaver is a full-service national accounting, advisory, and consulting firm that brings a human element to the world of accounting. We foster a diverse, collaborative, and entrepreneurial workplace culture where leaders care about employee well-being and support professional and personal growth. Our success is built on people, and we commit to balancing high development with high performance to meet the long-term goals of individuals, teams, and the firm. Learn more about our services, industry experience, and culture at weaver.com.

About the role

Weaver’s Governance, Risk, and Compliance (GRC) practice is seeking an IT Associate to join their growing team. The GRC-IT Associate is responsible for executing audit procedures and completing engagement objectives, primarily supporting System and Organization Controls (SOC 1 and SOC 2) examinations for clients across various industries and technology environments. This role offers hands-on client experience, structured mentorship, and ongoing career development, allowing you to strengthen your capabilities, expand your technical and professional skills, and take on increasing responsibility.

Responsibilities

• Support SOC 1 and SOC 2 (Type 1 and Type 2) examinations under the guidance of senior team members and in accordance with AICPA standards and firm methodology.
• Test the design and operating effectiveness of IT general controls, automated application controls, and key business process controls, including controls related to logical access, change management, system operations, job scheduling, backup and recovery, and incident management.
• Communicate engagement status, testing results, open items, and potential issues to supervisors on a daily basis.
• Prepare clear, accurate, and complete workpapers that support testing results and conclusions and meet firm quality and documentation standards.
• Identify and document control exceptions and deficiencies, assess the related risks, and assist in developing practical remediation recommendations.
• Assist with preparing SOC reports and other client deliverables upon request.
• Apply sound judgment while complying with Weaver & Tidwell, LLP’s ethical requirements, including independence, objectivity, and client confidentiality.
• Take ownership of small projects under the supervision of more experienced team members while documenting and issuing reports.

Requirements

• Bachelor’s degree in Management Information Systems, Computer Science, Accounting, Business, or a related field.
• 0-2+ years of public accounting experience in SOC 1 / SOC 2 examinations, IT audit, IT risk, internal audit, SOX ITGC testing, or external audit support. Relevant industry and internship experience will be considered.
• Basic understanding of GAAP, GAAS, and IIA standards.
• Team orientation and strong interpersonal skills.
• Ability to learn quickly and adapt to a fluid working environment.
• Willingness and ability to commute to Weaver’s New York City office generally once per week if based in Little Falls, NJ, or twice per month if based in Philadelphia, PA.
• Hybrid schedule permitted.

Qualifications (Preferred)

• Master’s degree in Accounting or a related field.
• CPA, CPA candidate, CIA or CIA candidate, CISA or CISA candidate (CISA preferred).
• Strong verbal and written communication skills, with the ability to translate between technical and non-technical audiences.
• Proficiency in Excel, Word, and PowerPoint, and openness to learning audit and workflow platforms used by the firm.
• Strong multi-tasking and project management skills.
• Excellent critical thinking and attention to detail.
• Exposure to information security frameworks such as ISO 27001, NIST, HITRUST, or PCI DSS is a plus.

Benefits

• Competitive health benefits, including medical, dental, vision, disability, and life insurance.
• 401(k) plan.
• Flexible scheduled time off (STO), minimum of 56 hours of sick and safe leave, 11 holidays, and 2 scheduled recharge days.
• In-house CPE and learning opportunities through our internal Learning & Development department, including technical improvement, practice development, management/leadership training, and whole-life growth.

Pay

Annual base pay range in New York: $75,000 - $85,000. Exact compensation may vary based on skills, experience, certifications, and location.