RSM’s Business Application Risk practice is seeking an experienced ERP security & controls specialist with a strong background in IT audit, automated application controls, and experience with ERP security architecture, to join our fast-growing risk transformation team.
The Business Application Risk Solutions practice in consulting specializes in managing governance and regulatory risk, for security, controls, and data, across the full lifecycle of core business applications—from implementation through operations.
The practice performs implementation risk quarterback solutions, system integrity solutions, security and controls designs/assessments, complex data analytics, GRC automation/implementation, security role design, security managed services, segregation of duties assessments, as well as intelligent control implementations. The ideal candidate will have experience with popular ERP systems such as NetSuite, Oracle, SAP, D365, Workday, etc. Experience with scoping and executing security segregation of duties assessments, security role designs, as well experience with business automated controls is ideal.
Basic Qualifications:
· Degree required
· 2-4 years' experience working as a business analyst, IT auditor, or implementation architect
· Exposure to functional automated controls and security role architecture for at least one major ERP system (e.g., NetSuite, Workday, SAP, D365)
· Experience in independently leading and performing IT audits or recipient of an audit (ITGCs, Security, Controls)
· Experience on at least one ERP implementation
· Clear and concise communication skills. Ability to understand what to communicate to different audiences
· Highly organized with the ability to monitor engagement time and expenses
· Ability to provide client status updates, review deliverables, maintain updates with the engagement supervisor timely and communicate client opportunities
· Ability to put forth additional effort to meet deadlines when necessary
Preferred Qualifications:
· Demonstrated knowledge of using ERP security experience
· Demonstrated knowledge of auditing automated business controls
· Experience with data analytics tools (such as ACL or MS Access) performing complex queries
· Team member of at least one ERP implementation.
· Experience with other business applications / GRC tools is a plus.
· 2 - 3 years of professional experience in public accounting or relevant compliance industry experience relating to Sarbanes Oxley (SOX) compliance or other COBIT/NIST/ISO frameworks
· Desire to obtain certification, such as CISA, PMP, CPA, or other ERP related certifications.
Standards of Performance:
· The successful candidate will have a high level of energy, is analytical, organized, and innovative problem solver, with critical thinking skills
· Ability to communicate effectively with a broad audience ranging from technical to non-technical
· Excellent organizational skills and the ability to prioritize multiple tasks, projects and assignments
· Possess strong business ethics and willingness to adhere
