Director, Technology Risk Consulting - IT Audit

Get roles like this by email

New roles in Waterloo Region, mailed the morning after they appear, and The Weekly each Monday.

Change or stop it from any email.

We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, culture and talent experience and our ability to be compelling to our clients. You’ll find an environment that inspires and empowers you to thrive both personally and professionally. There’s no one like you and that’s why there’s nowhere like RSM.

About the Role

RSM has an exceptional career opportunity for a Director to join our Risk Consulting Services practice as part of our Technology Risk Consulting team. This leadership role offers the opportunity to help clients navigate complex technology risks, strengthen governance and controls, and drive business value through effective risk management.

As a Director, you will serve as a trusted advisor to middle market organizations and other complex enterprises, helping leadership teams address technology, cybersecurity, compliance, and operational risks. You will be responsible for leading client engagements, developing talent, cultivating business opportunities, and contributing to the continued growth of a dynamic and collaborative consulting practice.

This role is ideal for an experienced professional who enjoys building strong client relationships, mentoring teams, developing business, and delivering impactful solutions while maintaining a balanced and rewarding career.

What You'll Do

• Advise client leadership on the design, enhancement, and optimization of technology and business process controls.

• Serve as a trusted advisor on technology risk management, governance, compliance, and emerging technology risks.

• Lead teams in evaluating the design and operating effectiveness of information technology controls and identifying opportunities for improvement.

• Oversee IT-related support for financial statement audits, SOX compliance programs, and internal audit engagements.

• Lead the evaluation and testing of automated application controls and technology-enabled business processes across a variety of ERP platforms and software applications.

• Direct SOC attestation and other third-party assurance engagements.

• Lead cybersecurity risk management consulting and assessment engagements.

• Identify, pursue, and secure new client opportunities through relationship development and market-facing activities.

• Manage a diverse portfolio of client engagements while maintaining responsibility for profitability, quality, and risk management.

• Provide leadership on proposals, client pursuits, and strategic internal initiatives.

• Recruit, develop, mentor, and retain high-performing professionals while fostering an inclusive, collaborative team environment.

Minimum Required Qualifications

• Bachelor's or master's degree in business, accounting, management information systems (MIS), computer science, or a related discipline.

• Ten years of experience in information technology risk management, internal audit, public accounting, and/or consulting.

• One or more professional certifications required, such as:

  • Certified Public Accountant (CPA)

  • Certified Information Systems Auditor (CISA)

  • Certified Information Systems Security Professional (CISSP)

  • Certified Information Security Manager (CISM)

  • Certified Information Privacy Professional (CIPP)

Preferred Qualifications

• Minimum of eight years of experience within a public accounting or professional services firm.

• Experience leading client engagements and managing managers and staff.

• Experience managing project financials and delivering engagements within established fees and budgets.

• Experience managing, mentoring, and developing professionals while balancing workloads and stakeholder expectations.

• Strong understanding of information technology controls and security concepts, including experience with widely used financial applications and ERP systems such as SAP, Oracle, JD Edwards, PeopleSoft, or similar platforms.

• Advanced knowledge of relevant regulations, frameworks, and standards, including SOX, AICPA SOC Reporting Standards, COSO, COBIT, FFIEC, ITIL, ISO 27001, PCI, HIPAA, and GLBA.

• Demonstrated ability to apply regulatory and control requirements within organizational control frameworks.

• Recent success developing new business opportunities and participating in market-facing activities.

• Exceptional interpersonal and relationship-building skills.

• Advanced written, verbal, and presentation skills, including experience interacting with executive and senior leadership teams.

• Ability to travel as needed to serve client needs (estimated 10% to 30%).

At RSM, we offer a competitive benefits and compensation package for all our people. Learn more about our total rewards at <https://rsmus.com/careers/working-at-rsm/benefits>.

We believe flexibility and in-person connection both play an important role in how we work and grow. Most roles at RSM follow a hybrid workstyle, which means team members are aligned to an RSM office and come together in person when it best supports clients, teams, development or relationship-building. Some roles may be virtual or primarily on-site based on role requirements, team priorities and client needs.

All applicants will receive consideration for employment as RSM does not tolerate discrimination and/or harassment based on race; color; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender; sexual orientation; HIV Status; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the US uniformed service; US Military/Veteran status; pre-disposing genetic characteristics or any…