London Region Assurance - Controls - Senior Associate
Who we are looking for
The London Region Assurance (LRA) Risk Assurance business group at PwC is looking for a Senior Associate to join their Controls Assurance team. In joining us you will be part of a unique client proposition committed to, assisting our clients understand and challenge the extent to which their company's systems, supporting IT infrastructure, processes and people assists or inhibits their strategies to generate value.
As a credible candidate you will have developed core skills in a wide range of disciplines including accounting/audit, application and support of information technology, risk evaluation and project governance. Our people are expected to be capable of applying these core skills in a variety of business situations and industries and as a Senior Associate, you will be expected to be demonstrate ability to be part of a larger team and later lead teams in scoping, delivering and quality assuring output.
In addition to your technical skills, you will have proven capabilities in developing relationships, building trust in new contacts and demonstrating that such trust is justified by delivering into the longer term.
About the role
We're a fast growing business unit with a unique assurance division offering a broad range of services, including Audit, Risk Assurance and Transaction Services (TS), which are tailored to help mid-sized and entrepreneurial clients, grow and overcome the complex challenges they face. Our client base varies from FTSE listed, AIM listed, Private companies to Private Equity and Venture Capitalist backed companies.
We take pride in helping clients to identify, measure and manage their risk profile more effectively. Our specialists offer knowledge and expertise, which extends to clients’ internal controls (including IT systems), technology, non-financial reporting, corporate sustainability and regulatory compliance.
In addition to supporting the external financial audit, we also provide a variety of internal audit and advisory services. Our capabilities support a wide range of businesses and industry sectors, on each and every project we undertake the advice and assurance we deliver is tailored and focused on the individual needs of that client.
You will be responsible for the following:
IT risk assessment and IT general controls experience including planning, delivering a diverse range of assignments.
Understanding of Control Frameworks e.g. COSO, COBIT.
Understanding of Sarbanes-Oxley (SOX) framework and compliance.
Effectively working in a project team on a range of complex engagements, including:
assessment or design of IT General controls across the four domains: access to programs and data, computer operations, program development and program changes.
security assessment at the three layers of security:
application security (through standard access test and segregation of duties review).
operating system security.
provision of specialist IT audit support to financial audit team on statutory engagements and advising on impacts to financial risk
assessment and/or designing risk and control matrix for client as part IT internal audit.
impact assessment of IT General controls on key financial processes (incl. procure to pay, order to cash, period end financial close, inventory management, cash management, payroll)
Assisting with the direction of scoping, planning and delivery of engagements, and discussing findings and assisting with reporting to our clients.
Coaching and mentoring junior staff.
You will apply a client centric approach and demonstrate strong critical thinking skills. It is essential that
the applicant has the following key skills and experience:
Good experience in IT Risk assessment and Audit or Advisory, and an understanding of current technology trends.
Good experience in assessing IT General Controls across multiple ERP/Non-ERP applications and supporting infrastructure (Operating systems [UNIX, Windows, OS/400 or IBMi] and Databases [Oracle, SQL, DB2]).
Good experience in assessing and/or designing risk and control matrix for client as part IT internal audit activities.
Good understanding of key business processes, and the associated risks and controls
Good organizational skills and demonstrated ability to manage competing priorities
Excellent written and verbal communication skills
CISA qualification will be highly regarded as will experience in a professional services environment.
Sound client service skills - Ability to build and maintain client relationships
Amount of time office based: 40%
Amount of time at client sites: 60%
Need to travel/overnight stays away from home: Yes - dependent upon projects and portfolio
Opportunity for flexible working?: Yes
Opportunity for working from home?: minimal but depends on projects
Opportunity for job sharing?: No