As CohnReznick grows, so do our career opportunities. As one of the world's top professional services firms, and in support of our global workforce strategy, we're growing our operations in the Philippines through our wholly owned affiliate, CohnReznick Philippines. We create rewarding careers in advisory, assurance, and tax with team members who value innovation and collaboration in everything they do!

We currently have an exciting career opportunity for an AssociateManager to join the Cybersecurity and Digital Trust team in our Risk Advisory Services practice.

CohnReznick is a hybrid firm and most of our professionals are located within a commutable distance to one of our offices. This position is considered hybrid which means team members are expected to be thoughtful and intentional in how they create opportunities for in-person collaboration. While the cadence of in-office presence is determined at the team level, our professionals are encouraged to be in the office/together in person on average 3 days a week.

YOUR TEAM.

This position will support our Advisory Team and you will examine, evaluate, and verify policies, procedures, and internal controls across IT and cybersecurity domains. This includes applications, databases, operating systems, networks, and security frameworks. You will play a critical role in assessing IT general controls for Sarbanes-Oxley (SOX) compliance using COBIT, while also evaluating cybersecurity posture, resilience, and adherence to global standards such as NIST, ISO 27001, and GDPR.

WHY COHNREZNICK

At CohnReznick, we're united by a common mission to create opportunity, value, and trust for our clients, our people, and our communities. Whether it's working alongside your peers to solve a client challenge, or volunteering together at the local food bank, there are so many ways to find your why at the firm.

We believe it's important to balance work with everyday life – and make time for enjoyment and fun. We invest in a robust Total Rewards package that includes everything from generous PTO, a flexible work environment, expanded parental leave, extensive learning & development, and even paid time off for employees to volunteer.

YOUR ROLE.

Responsibilities include but not limited to:

Conduct IT and cybersecurity audits in alignment with professional standards and client expectations.
Analyze and document IT and security controls; develop audit programs to test both ITGCs and cyber safeguards.
Evaluate adequacy of security controls, including identity management, encryption, endpoint protection, and incident response.
Monitor new system development, disaster recovery testing, business continuity planning, and cyber resilience initiatives.
Review reliability and integrity of financial, operational, and security information, including logging, monitoring, and threat detection.
Assess means of safeguarding information assets against cyber threats, including ransomware, phishing, and insider risks.
Collaborate with Governance, Risk, and Compliance teams on SOX, internal audit, and cyber risk assessments.
Prepare audit work papers and reports that integrate IT and cybersecurity findings.
Present audit and cyber risk findings to senior management, recommending remediation and proactive defense strategies.
Maintain and enhance audit templates to include cyber risk evaluation.
Actively communicate with clients to manage expectations, ensure satisfaction, and lead change efforts effectively.
Partner with senior managers on proposals and business development calls, highlighting cyber risk advisory capabilities.

YOUR EXPERIENCE.

The successful candidate will have:

5+ years of hands-on ITGC experience, with exposure to cybersecurity audits and risk assessments.
Strong knowledge of ITGCs, SOX compliance, and cyber frameworks (COBIT, NIST, ISO 27001, GDPR, HIPAA).
Experience documenting audit findings, cyber incidents, and remediation procedures.
Expertise in IT audit, cybersecurity governance, data privacy, and regulatory compliance.
Understanding of cloud security, DevSecOps, and emerging technologies (AI, ML, Blockchain).
Proven success in managing projects across planning, fieldwork, reporting, and cyber incident response.
Exceptional client service and communication skills, with ability to explain technical cyber risks to non-technical stakeholders.
Proficiency in Microsoft Office (Excel, Word) and familiarity with security tools (SIEM, IDS/IPS, vulnerability scanners).
Ability to manage multiple engagements in a fast-paced, results-driven environment.

Studies have shown that we are less likely to apply to jobs unless we meet every single qualification. At CohnReznick, we are dedicated to building a diverse, equitable, and inclusive workplace, so if you're excited about this role but your experience doesn't align perfectly with every qualification in the job description, we still encourage you to apply. You may be just the right candidate for this or one of our other roles.

CohnReznick is an equal opportunity employer, committed to a diverse and inclusive team to drive business results and create a better future every day for our team members, clients, partners, and communities. We believe a diverse workforce allows us to match our growth ambitions and drive inclusion across the business. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, or protected veteran status and will not be discriminated against on the basis of disability. For more information, please see Equal Employment Opportunity Posters.

If you are an individual with a disability in need of assistance at any time during our recruitment process, please contact us at [HIDDEN TEXT] Please note: This email address is reserved for individuals with disabilities in need of assistance and are not a means of inquiry about positions or application statuses.

CohnReznick does not accept unsolicited resumes from third-party recruiters unless such recruiters are currently engaged by CohnReznick Talent Acquisition Team by way of a written agreement to provide candidates for a specified opening. Any employment agency, person or entity that submits an unsolicited resume does so with the understanding that CohnReznick will have the right to hire that applicant at its discretion without any fee owed to the submitting employment agency, person or entity.

Cybersecurity and Digital Trust Associate Manager