How We Work
Whitley Penn has become one of the most distinguished and fastest growing public accounting firms by providing exceptional service that reaches far beyond traditional accounting. We believe in working in collaborative teams with an emphasis on an open-door policy and encouraging entrepreneurial thinking. We learn, innovate, and succeed by sharing knowledge, embracing diversity, and working together. We are all part of the same family and each person matters. We are more than just a job.
How Will You Make an Impact?

• Drive the Compliance programs for FTC, SOC2, and compliance with other standards as directed.
• Monitor and identify compliance issues with federal, state, client requirements, and industry best practices and follow-up with recommendations.
• Support and drive client audits, questionnaires, and requests for information.
• Manage third-party vendor relationships in terms of compliance including conducting vendor risk assessments, security and compliance standards, data governance, and contractual obligations.
• Develop and implement compliance policies, procedures, and controls to ensure adherence to regulatory requirements and industry best practices.
• Provide guidance to internal stakeholders on compliance related matters to ensure a strong culture of compliance throughout the firm.
• Conduct regular audits and assessments of IT systems and processes to identify and mitigate compliance and security risks.
• Assist in investigating and reporting compliance incidents including proper documentation and ensuring corrective actions are taken.
• Collaborate with internal teams to address compliance gaps and drive continuous improvement in IT and security processes.
• Other relevant job duties as assigned or required.

Required Skills

• Bachelor's Degree in Information Technology or related field; or 5 additional years in IT Compliance specific positions and responsibility if no degree.
• CISA, CIA, CISSP or other compliance related certifications are a plus.
• 1 years of experience in IT Compliance.
• 3-5 years in other information technology related work.
• Strong knowledge in regulatory compliance, privacy laws, and industry standards. Experience in tax, accounting, or financial services is preferred.
• Experience working with GRC tools and processes is a plus.
• Experience with SOC2 (AICPA) audits is a plus.
• General knowledge of at least one compliance framework (PCI, ISO 27001, NIST 800-53, or similar).
• Great professional and interpersonal skills; able to interact well with all levels of employees as well as external clients.
• Excellent written, verbal communication and presentation skills.
• Team player with high performance standards and ability to work well with supervision as well as independently.
• Initiative to manage job related continuing education, keep abreast of current trends in IT Compliance and desire to learn and change.

Why Should You Apply?

• Firm Paid Medical Insurance(Employee Only Coverage on 2 of 3 plans)
• Voluntary Dental and Vision Insurance
• Unlimited PTO ("Time Away") for Salaried Employees
• Paid Parental Leave
• 401(k)
• Discretionary Bonus Program
• CPA (& Other Professional Designations) Exam Passing Bonus & Reimbursement for Exam Fees
• Health & Wellness Program
• Pet Insurance

Whitley Penn is proud to be an equal opportunity workplace. We recruit, employ, train, compensate, and promote without regard to on age, race, creed, gender, color, religion, national origin, sexual orientation, gender identity, veteran status, disability or any other basis protected by applicable federal, state, or local law. Whitley Penn is a participant in E-Verify please follow the link to review disclosure notifications: https://www.dropbox.com/s/olsr5xgsgxsntu3/E-Verify Notices.pdf?dl=0. All employment is decided on the basis of qualifications, merit, and business need.
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information. 41 CFR 60-1.35(c)