Assurance Experienced Associate, Third Party Attestation

About the role

The Assurance Experienced Associate, Third Party Attestation will prepare third-party attestation reports such as SOC 1, SOC 2, SOC 3, SOC for Cybersecurity, WebTrust for CAs, HITRUST, SSPA, ISO, MRC, and CSA STAR. Responsibilities include understanding and applying most areas of the governing standard, documenting, validating, testing, and assessing various control systems, and communicating improvements to client internal control procedures.

Responsibilities

• Identify and consider applicable policies, laws, rules, and regulations as part of the engagement team
• Make constructive suggestions to improve client internal control procedures
• Document and validate the operating effectiveness of clients' internal control systems
• Document business and IT processes and controls, and test key controls for service organizations in various industries
• Assess key risks and prioritize areas for improvement, efficiency, and risk mitigation
• Develop and maintain relationships with client personnel and management
• Ensure technology integration into the examination process
• Apply auditing theory to various client situations
• Document working papers and attestation reports in line with BDO policy, identifying deviations and notifying more senior team members for approval
• Contribute ideas and opinions to the engagement team
• Complete all appropriate documentation of BDO work papers
• Ensure assigned work is performed in accordance with BDO methodology and requirements
• Research basic and intermediate topics independently and form an initial opinion on the treatment
• Attend professional development and training sessions regularly and complete required CPE hours
• Provide training to colleagues as needed

Requirements

One (1) or more years of prior experience in IT, internal or external audit or relevant industry experience are required. Experience performing internal control reviews, SOC, WebTrust, HITRUST, SOX, ISO 27001, and security/privacy advisory engagements is preferred. Relevant experience-based internships are also considered.

Skills

• Bachelor’s degree in Accounting, Computer Science, Management Information Systems, Business Administration, Managerial Marketing and Entrepreneurship, Finance or Economics, required
• Master’s degree in Accounting and minor or dual major in Information Systems or other advanced degree, preferred
• Relevant certifications such as CPA, CISA, CISSP, CCSFP, CIA, CISM, CISM, C | EH, CRISC, CGEIT are preferred
• Software proficiency in Microsoft Office Suite, specifically Word, Excel, and PowerPoint, required
• Prior experience with various applications (ERP systems, operating systems, databases) and exposure to cloud platforms, SaaS applications, security and engineering tools, and other industry software, preferred

Qualifications

• Basic understanding and experience planning and coordinating technology-focused audits and assessments
• Knowledge of internal controls and professional standards and regulations (SOC, ISO, WebTrust, HITRUST, Sarbanes-Oxley, etc.)
• Knowledge of data analytics and emerging technologies beneficial
• Strong verbal and written communication skills with the ability to adapt style and messaging to effectively communicate and interact with professionals at all levels
• Solid analytical and diagnostic skills and ability to break down complex issues and implement appropriate resolutions
• Solid project management skills
• Able to work in a demanding, deadline-driven environment with a focus on details and accuracy

Benefits

Individual salaries are determined based on qualifications, experience, skills, and location. Benefits may vary by location and include health insurance, retirement plans, and paid time off. Equal opportunity employer, including disability/veterans.