CLA is a top 10 national professional services firm where our purpose is to create opportunities every day, for our clients, our people, and our communities through industry-focused wealth advisory, digital, audit, tax, consulting, and outsourcing services. Even with more than 8,500 people, 130 U.S. locations, and a global reach, we promise to know you and help you.

We are seeking a Controls Consultant Associate. Under general direction, this role assesses the security of clients' networks, systems, applications, and people. They support the evaluation of design and operational effectiveness of clients' IT environments, aiming to improve controls and safeguard data. They also assist the team in identifying opportunities to improve and streamline existing controls processes.

Essential Job Functions

• Provide control analysis for clients, including reviewing and analyzing IT process and control documentation, conducting sample testing, conducting information security risk assessments, and providing outsourced information security advisory services.

• Participate in BCP/DR/IR Table-Top exercises.

• Support client services including GCR, FAS, risk assessments, controls-based assessments (control frameworks or customized), and OISA or equivalent consulting services.

• Assist in the development and implementation of internal control policies and procedures.

• Provide direction, train, and delegate work to interns as needed.

• Write and deliver on time reports for clients and conduct quality client interviews to understand processes and controls and present observations.

• Assist Seniors, Managers, and Directors with client relationships, practice management, and business development activities.

Requirements

Experience

• None required.

• 1 year of relevant experience preferred.

Education

• Bachelor's degree is required. Combination of relevant experience, education, and training may be accepted in lieu of degree.

• Degree in Computer Science, Information Technology, Information Assurance or related field preferred.

Certifications / Licenses

• None Required

• The following certifications are preferred:

CISA or equivalent (GSEC, ECSA, SSCP)
CompTIA certs - like Security +
Privacy Certifications (CDPSE)
CISSP or equivalent (CISM)
CRISC

Technical Competencies

Understanding of a relevant control framework (PCI, NIST, ISO, CIS etc.)
Proficient in regulatory methodologies for GLBA, FFIEC, HIPAA and ACAT internal control programs
Knowledge of IT security concepts, security compliance standards, best practices, and procedures.
Knowledge of general business governance concepts and procedures.
Familiarity of technical services such as network penetration testing, social engineering, and vulnerability scanning.
Knowledge of regulatory guidelines related to internal controls.
Proficiency in Microsoft Outlook and Office products (Word, Excel, PowerPoint etc.)

Travel Requirements

This position requires <10% travel.

#LI-RC1

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

Click here to learn about your hiring rights.

Wellness at CLA

To support our CLA family members, we focus on their physical, financial, social, and emotional well-being and offer comprehensive benefit options that include health, dental, vision, 401k and much more.

To view a complete list of benefits, click here.

Learn more about this Employer on their Career Site