Senior Associate, IT Compliance jobs in United States
cer-icon
Apply on Employer Site
company-logo

Arhaus · 21 hours ago

Senior Associate, IT Compliance

Arhaus is a company that focuses on sustainably sourced furniture and décor. They are seeking a Senior Associate, IT Compliance to provide comprehensive IT risk management and assurance services, assess and mitigate IT risks, and ensure compliance with regulatory requirements.

Consumer GoodsE-CommerceFashionFurnitureHome DecorLifestyleManufacturingReal EstateRetail
Hiring Manager
Milan Fields
linkedin

Responsibilities

Conduct IT risk assessments to identify potential risks and vulnerabilities and recommend proactive measures to mitigate threats
Evaluate and provide insights on the adequacy and effectiveness of IT risk management processes
Develop risk assessment frameworks, methodologies, and tools
Develop and implement risk mitigation strategies and action plans
Coordinate with internal and external auditors to facilitate IT audits and assessments
Evaluate the design and operational effectiveness of IT processes, policies, and procedures to ensure IT policies and procedures are implemented, up-to-date and compliant with current SOX regulations and industry standards
Assess the design and operating effectiveness of IT controls associated with IT systems, infrastructure, and applications to ensure compliance with regulatory requirements and internal policies
Identify control gaps and recommend improvements to enhance the control environment
Maintain clear and concise documentation of risk assessments, control evaluations, and audit findings
Perform evolutions of Service Organization Controls (SOCR - SSAE 16 // ISAE 3402 / SOC 1)
Identify and document deficiencies in IT controls, and work with management to develop and implement remediation plans
Assist Management to design and implement IT controls to mitigate risks and enhance the overall control environment
Assist management in the development, implementation, and maintenance of IT policies and procedures
Assist management in the development of standard operating procedures (SOPs), process flow diagrams, and narratives
Ensure compliance with relevant regulations, industry standards, and internal policies
Monitor and assess changes in regulatory environments and industry best practices
Provide recommendations to improve IT governance frameworks and practices
Collaborate with IT, Internal Audit, Business Compliance and business owners to promote a culture of risk awareness and compliance
Advise on risk and control implications for new projects and system implementations
Serve as a subject matter expert on IT risk and control issues
Proactively engage with Internal and External audit functions to align on methodologies, scope and approach related to audit activities
Prepare and present IT risk and control reports to senior management and stakeholders
Communicate risk management and assurance findings effectively to various audiences
Proactively communicate with internal and external audit functions
Communicate audit results to various stakeholders, including management and IT teams
Track and monitor the implementation of audit recommendations and verify compliance
Deliver training programs to users to enhance their understanding and awareness of IT compliance requirements
Foster a culture of compliance within the organization through regular communication and education initiatives
Stay current with industry trends, emerging risks, and best practices in IT risk management and assurance
Identify opportunities for continuous improvement in IT risk and control processes
Promote the adoption of innovative solutions to enhance the organization’s risk management capabilities

Qualification

IT risk management frameworksSOX regulatory complianceIT auditingIT controls evaluationProfessional certificationData analysisAnalytical skillsProblem-solving skillsCommunication skillsOrganizational skills

Required

Bachelor's degree in Accounting, Computer Science, Information Systems, or a related field
Professional certification such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Public Accountant (CPA) or equivalent
Proven experience in IT auditing, risk assessment, and compliance (5+ years)
Thorough knowledge of IT controls, security, and risk management frameworks (e.g., COBIT, ISO 27001, NIST)
Familiarity with IT governance principles and best practices
Proficient in conducting system and data analysis
Strong analytical, problem-solving, and critical-thinking skills
Excellent written and verbal communication skills
Ability to work independently and collaboratively in a team environment
Detail-oriented with strong organizational and time management skills

Preferred

Familiarity with audit software tools and data analytics is a plus

Company

Arhaus is a premiere retail chain that designs, manufactures, and sells home furnishings both at retail locations and online.

Funding

Current Stage
Public Company
Total Funding
$150M
Key Investors
Monroe Capital
2023-08-16Post Ipo Secondary· $120M
2021-11-04IPO
2017-06-27Debt Financing· $30M

Leadership Team

leader-logo
Jennifer Porter
Chief Marketing Officer
linkedin
Company data provided by crunchbase