Controls Consultant Associate

CLA (CliftonLarsonAllen)

Controls Consultant Associate assessing IT controls, security, and compliance for CLA, a professional services firm. Supporting risk assessments, control testing, advisory services, and client reporting.

Posted 8/12/2026full-timeAustin • Pennsylvania, Texas, Wisconsin • 🇺🇸 United StatesJuniorMid-LevelWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in information security risk assessments, control analysis, and compliance with regulatory frameworks. Proficient in developing internal control policies and delivering client reports while supporting business development activities.

Highest-signal resume keywords

Information Security Risk AssessmentControl AnalysisCISA or Equivalent CertificationKnowledge of PCI, NIST, ISO, and CIS FrameworksProficiency in Microsoft Office Products

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information Security Risk AssessmentControl AnalysisInternal Control Policy DevelopmentNetwork Penetration TestingVulnerability ScanningSample TestingClient ReportingBusiness Governance Concepts

Soft Skills

Client Relationship ManagementTraining and DelegationCommunication Skills

Tools & Technologies

Microsoft OutlookMicrosoft WordMicrosoft ExcelMicrosoft PowerPoint

Certifications & Qualifications

CISAGSECECSASSCPCompTIA CertificationsCDPSECISSPCISMCRISC

Industry Keywords

GLBAFFIECHIPAAACATSecurity Compliance StandardsControl Frameworks

About the role

Key responsibilities & impact

Provide control analysis for clients by reviewing and analyzing IT process and control documentation
Conduct sample testing and information security risk assessments
Provide outsourced information security advisory services
Participate in BCP/DR/IR Table-Top exercises
Support client services including GCR, FAS, risk assessments, controls-based assessments, and OISA or equivalent consulting services
Assist in developing and implementing internal control policies and procedures
Provide direction, train, and delegate work to interns as needed
Write and deliver timely client reports
Conduct client interviews to understand processes and controls and present observations
Assist Seniors, Managers, and Directors with client relationships, practice management, and business development activities

Requirements

What you’ll need

No experience required
1 year of relevant experience preferred
Bachelor's degree required; combination of relevant experience, education, and training may be accepted in lieu of degree
Degree in Computer Science, Information Technology, Information Assurance, or related field preferred
No certifications or licenses required
CISA or equivalent certifications preferred, including GSEC, ECSA, SSCP, CompTIA certifications, CDPSE, CISSP or equivalent, CISM, and CRISC
Understanding of relevant control frameworks such as PCI, NIST, ISO, and CIS
Proficiency in regulatory methodologies for GLBA, FFIEC, HIPAA, and ACAT internal control programs
Knowledge of IT security concepts, security compliance standards, best practices, and procedures
Knowledge of general business governance concepts and procedures
Familiarity with network penetration testing, social engineering, and vulnerability scanning
Knowledge of regulatory guidelines related to internal controls
Proficiency in Microsoft Outlook and Office products, including Word, Excel, and PowerPoint
Ability to travel less than 10%

Benefits

Comp & perks

Comprehensive benefit options including health, dental, and vision insurance
401(k)
Wellness support focused on physical, financial, social, and emotional well-being
Career growth and exposure to different roles
Opportunities to choose industry specialization, service capability, career path, and mobility