Assurance Experienced Associate, Third Party Attestation

We need to output HTML fragment with sections: headings

for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We must not repeat job title as heading. No Job ID etc. Remove boilerplate. Must preserve all substantive info. We need to parse the job description. Key sections: - Job Summary: "The Assurance Experienced Associate, Third Party Attestation will be responsible for the preparation of third-party attestation reports, including System and Organization Controls (SOC) 1, SOC 2, SOC 3, SOC for Cybersecurity and WebTrust for CAs, as well as HITRUST, SSPA, ISO, MRC and CSA STAR applying most areas of the governing standard as necessary and documenting, validating, testing, and assessing various control systems, including internal controls. Our TPA individuals specialize in these specific areas to understand the entire technology risk umbrella rather than maintaining overall knowledge in Information Technology General Control (ITGC) audit or IT audit." That's a prose description; could be "About the role" or "Job Summary". Use

About the role

with

. - Job Duties: multiple bullet-like paragraphs: Control Environment, Gaas, Methodology, Research, Training, Other duties as required. These are duties/responsibilities. So we can have

Responsibilities

with

• items. We need to extract each duty as list items. The text includes headings like "Control Environment:" then a colon and description. We can treat each as a list item. Similarly "Gaas Applies knowledge..." etc. "Methodology Applies knowledge..." etc. "Research Applies methodology..." etc. "Training Attend professional development..." etc. "Other duties as required" maybe a short line. We'll create list items for each. - Education Qualifications, Knowledge, Skills and Abilities: This section includes Education, Qualifications, Knowledge, Skills and Abilities. We can split into sections: Education (Qualifications), Requirements (Experience, License/Certifications, Software Proficiency), Skills (Other Knowledge, Skills & Abilities). But we must only create sections when there is real specific content. We have Education: Bachelor’s degree required, Master’s preferred. Experience: 1+ years prior experience in IT, internal or external audit or relevant industry experience required; experience performing internal control reviews preferred; experience performing SOC, WebTrust, HITRUST, SOX, ISO 27001 and security/privacy advisory engagements preferred; relevant experience-based internship preferred. License/Certifications: list of preferred certifications. Software Proficiency: Microsoft Office Suite required; prior experience with various applications, OS, databases preferred; exposure to cloud platforms, SaaS, security and engineering tools, other industry software preferred. Other Knowledge, Skills & Abilities: bullet list of abilities. We also have Pay: salary ranges per state. That's specific content: "Individual salaries that are offered to a candidate are determined after consideration of numerous factors including but not limited to the candidate’s qualifications, experience, skills, and geography. California Range: $79,000 - $90,000 Colorado Range: $74,000 - $80,000 Illinois Range: $75,000 - $80,000 Massachusetts Range: $75,000 - $80,000 Minnesota Range: $70,000 - $80,000 NYC/Long Island/Westchester Range: $75,000 - $80,000". So we can create a Pay section with

  Pay

  and maybe a

  containing that info, or a

  . Since it's specific numbers, we can put in

  . Benefits: There's a Benefits section later: "Learn more about our benefits: BDO Total Rewards encompass more than traditional benefits. Click here to find out more ! Benefits may be subject to eligibility requirements." Also earlier: "As a qualified retirement plan, the ESOP is a meaningful addition to our comprehensive compensation and Total Rewards benefits* offerings." Also mention ESOP. So we have some benefits info: ESOP, Total Rewards. We'll create a Benefits section with that. Schedule: Not mentioned. No schedule info. So we omit. We also have "About Us" section: could be "About the role"? Actually we already used About the role for job summary. The "About Us" is about company; could be a separate section like "About BDO". But the instruction says use headings for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It doesn't forbid other headings, but says use those for section headings. Probably we should stick to those headings. The "About Us" could be considered "About the role"? But we already used that for job summary. Maybe we can incorporate the About Us into a brief paragraph under About the role or maybe a separate "About the company" but not in list. Safer to keep only the sections we have substantive content for: About the role (job summary), Responsibilities, Requirements (maybe combine Education, Experience, Licenses), Skills (Other Knowledge, Skills & Abilities), Benefits, Pay. We need to avoid repeating job title as heading. Already not. We must not include boilerplate like EEO, navigation, etc. Remove. We must preserve all substantive info: ensure we don't lose any details. Let's extract details precisely. Job Summary paragraph: We'll copy exactly. Responsibilities: list items: - Control Environment: Applies knowledge and understanding of the collective effect of various factors on establishing or enhancing effectiveness, or mitigating the risks, of specific policies and procedures by: Identifying and considering all applicable policies, laws, rules, and regulations of the firm, regulators, or other authoritative bodies as part of engagement team; Making constructive suggestions to improve client internal control procedures; Documenting and validating the operating effectiveness of the clients’ internal control system; Documenting business and IT processes and controls and tests key controls for service organizations in a variety of industries; Identifying and prioritizing key risks, and assesses their impact and likeliness of occurrence; Communicating to the client areas to improve processes, strengthen controls, mitigate risks, and/or increase efficiency; Developing and maintaining relationships with client personnel and management; Ensuring technology is appropriately integrated into the examination process. - GAAS (Generally Accepted Auditing Standards): Applies knowledge and understanding of professional standards; application of the principles contained in professional standards; and the ability to document and communicate an understanding and application of professional standards on an engagement by: Developing and applying an intermediate knowledge of auditing theory, a sense of audit skepticism, and the use of BDO audit manuals; Applying auditing theory to various client situations; Documenting working papers and attestation reports in line with BDO policy, identifying deviations and notifying more senior team members in order to obtain appropriate approvals; Applying knowledge to identify instances where testing may be reduced or expanded and notifying more senior team members of the occurrence; Contributing ideas and opinions to the engagement team. - Methodology: Applies knowledge and application of BDO standards to guide effective and efficient delivery of quality services and products by: Completing all appropriate documentation of BDO work papers; Ensuring assigned work is performed in accordance with BDO methodology and requirements. - Research: Applies methodology used to seek or maintain information from authoritative sources and to draw conclusions regarding a target issue based on the information by: Researching basic and intermediate topics and forming an initial opinion on the treatment independently. - Training: Attend professional development and training sessions on a regular basis; Complete required CPE hours to maintain applicable certifications. - Other duties as required. We need to keep the content but can be concise? Must preserve ALL substantive information; do not invent or summarize away detail. So we need to keep the details, not drop any. However we can combine into list items but must not lose any detail. The list items above include all details from each bullet. Ensure we didn't omit any. Check each bullet: Control Environment: original text: "Control Environment: Applies knowledge and understanding of the collective effect of various factors on establishing or enhancing effectiveness, or mitigating the risks, of specific policies and procedures by: Identifying and considering all applicable policies, laws, rules, and regulations of the firm, regulators, or other authoritative bodies as part of engagement team Making constructive suggestions to improve client internal control procedures Documenting and validating the operating effectiveness of the clients’ internal control system Documenting business and IT processes and controls and tests key controls for service organizations in a variety of industries Identifying and prioritizing key risks, and assesses their impact and likeliness of occurrence; Communicating to the client areas to improve processes, strengthen controls, mitigate risks, and/or increase efficiency Developing and maintaining relationships with client personnel and management Ensuring technology is appropriately integrated into the examination process" We captured all. GAAS: original: "Gaas Applies knowledge and understanding of professional standards; application of the principles contained in professional standards; and the ability to document and communicate an understanding and application of professional standards on an engagement by: Developing and applying an intermediate knowledge of auditing theory, a sense of audit skepticism, and the use of BDO audit manuals Applying auditing theory to various client situations Documenting working papers and attestation reports in line with BDO policy, identifying deviations and notifying more senior team members in order to obtain appropriate approvals Applying knowledge to identify instances where testing may be reduced or expanded and notifying more senior team members of the occurrence Contributing ideas and opinions to the engagement team" We captured. Methodology: original: "Methodology Applies knowledge and application of BDO standards to guide effective and efficient delivery of quality services and products by: Completing all appropriate documentation of BDO work papers Ensuring assigned work is performed in accordance with BDO methodology and requirements" We captured. Research: original: "Research Applies methodology used to seek or maintain information from authoritative sources and to draw conclusions regarding a target issue based on the information by: Researching basic and intermediate topics and forming an initial opinion on the treatment independently" We captured. Training: original: "Training Attend professional development and training sessions on a regular basis Complete required CPE hours to maintain applicable certifications Other duties as required" We captured training and other duties. Now Education/Qualifications etc. We need to decide sections: maybe "Requirements" for education and experience, "Skills" for other knowledge/skills. But we have "Education Qualifications, Knowledge, Skills and Abilities:" heading in original. Then subparts: Education, Experience, License/Certifications, Software Proficiency, Other Knowledge, Skills & Abilities. We could create a section "Requirements" that includes Education, Experience, License/Certifications, Software Proficiency. And a section "Skills" for Other Knowledge, Skills & Abilities. But we must not create thin sections; we can combine. Let's extract each piece. Education: - Bachelor’s degree in Accounting, Computer Science, Management Information Systems, Business Administration, Managerial Marketing and Entrepreneurship, Finance or Economics, required - Master’s degree in Accounting and minor or dual major in Information Systems or other advanced degree, preferred Experience: - One (1) or more years of prior experience in IT, internal or external audit or relevant industry experience, required - Experience performing internal control reviews, preferred - Experience performing SOC, WebTrust, HITRUST, SOX, ISO 27001 and security/privacy advisory engagements, preferred - Relevant experience-based internship, preferred License/Certifications: - One or more of the following certifications are preferred: Certified Public Accountant (CPA); Certified Information Systems Auditor (CISA); Certified Information Systems Security Professional (CISSP); ISO 27001 Lead Auditor certification; HITRUST Certified Common Security Framework Professional (CCSFP); Certified Internal Auditor (CIA); Certified Information Security Manager (CISM); Certified Ethical Hacker (C | EH) (looks like a typo: "Certified Ethical Hacker (C | EH)");