Join Frazier & Deeter and be a part of a rapidly growing Top 50 accounting & advisory firm that has been repeatedly named a Best Firm to Work For, a Best Firm for Women and a Pacesetter firm among U.S. accounting firms. With several
offices across the U.S., UK, and India, there is a spot for you! We serve clients of all sizes across the United States and the globe, with a suite of services that grow every year. Our growth mindset and entrepreneurial environment translates into variety and opportunity for our people.At Frazier & Deeter, we’re committed to training, mentoring, and developing our staff members. With our emphasis on Investing in Relationships to Make a Difference and a Firmwide Focus on Inclusion, we help each other grow in every aspect of life.
Job Summary:
The Advisory Senior Associate will be responsible for leading the day-to-day execution and delivery of a range of projects focused on SOC examinations and reporting, IT internal audit and advisory, IT governance and risk assessment, system implementation reviews, Sarbanes-Oxley compliance, PCI, and information security. The Advisory practice is well-positioned to pace the overall growth of the Firm due to our unique positioning in the marketplace and overall demand for our services. We are seeking self-motivated and qualified candidates with a passion for quality client service to join our growing team.
Duties & Responsibilities:
- Lead day‑to‑day execution of advisory engagements, including SOC 1/SOC 2 examinations, IT internal audits, IT risk assessments, and information security reviews.
- Perform detailed testing and evaluation of IT general controls (ITGCs), application controls, cybersecurity controls, and operational processes.
- Assess client environments against industry frameworks such as COBIT, NIST, ISO 27000, PCI, HIPAA, and AICPA trust services criteria.
- Support Sarbanes‑Oxley (SOX) compliance efforts, including walkthroughs, control design assessments, and testing in accordance with PCAOB standards.
- Evaluate system implementation projects to ensure appropriate controls, governance, and risk mitigation practices are in place.
- Prepare high‑quality workpapers, audit documentation, and client deliverables that clearly communicate findings, risks, and recommendations.
- Collaborate with client stakeholders, external auditors, and internal teams to clarify expectations, resolve issues, and ensure timely engagement delivery.
- Identify control gaps, process inefficiencies, and improvement opportunities; develop practical, value‑added recommendations.
- Assist in drafting SOC reports, risk assessment summaries, audit reports, and executive‑level presentations.
- Mentor, train, and review work of staff associates to support their professional development.
- Contribute to engagement planning, scoping, and risk assessment activities.
- Maintain strong working knowledge of emerging technologies, regulatory trends, and industry best practices.
- Manage multiple projects simultaneously while meeting deadlines and maintaining high‑quality standards.
Education & Experience:
- 3+ years of Information Security or Information Technology experience required
- Bachelor’s degree in Accounting, Finance, Management Information Systems(MIS), or related field required
- CISA candidate, other certifications accepted (CPA, CISSP, CIA, etc.)
- Demonstrated success in a client service role, preferably with Big 4 or national advisory firm
- Familiarity with variety of technologies, operating systems, databases, and reporting and data analytics tools
- Ability to interact with external auditors and members of management to deliver expectations and communicate and interpret key audit priorities and issues, including PCAOB and AICPA trends
- Exceptional organizational skills with capability to present to Board / C-suite audience
- Strong written and verbal communication skills
- Experience related to the following areas:
- SSAE 18 / SOC 1 / SOC 2
- Sarbanes-Oxley and PCAOB requirements
- IT risk assessment / operational IT audit
- IT general controls
- COBIT framework
- PCI
- Information security / cyber frameworks (ISO 27000, NIST, AICPA, etc.)
- HIPAA
- Systems development life cycle
- Business acumen, ability to anticipate and escalate issues
- Ability meet deadlines
- Working knowledge of basic financial accounting, auditing and financial reporting concepts
- Teaching and staff development
- Ability and appetite to invest into relationships
- Exemplify a positive attitude and strong work ethic with a commitment to teamwork and professionalism.
- Ability to travel 20% to 40%
#LI - hybrid
