Assurance Experienced Associate, Third Party Attestation

About the role

The Assurance Experienced Associate, Third Party Attestation will prepare third-party attestation reports such as SOC 1, SOC 2, SOC 3, SOC for Cybersecurity, WebTrust for CAs, HITRUST, SSPA, ISO, MRC, and CSA STAR. Responsibilities include understanding and applying the governing standards, documenting, validating, testing, and assessing various control systems, and developing relationships with client personnel and management.

Responsibilities

• Identify and consider applicable policies, laws, rules, and regulations as part of the engagement team.
• Make constructive suggestions to improve client internal control procedures.
• Document and validate the operating effectiveness of the clients' internal control system.
• Document business and IT processes and controls, and test key controls for service organizations in various industries.
• Assess identified risks and prioritize areas for improvement.
• Communicate recommendations to enhance processes, strengthen controls, mitigate risks, and increase efficiency.
• Develop and maintain relationships with client personnel and management.
• Ensure technology integration into the examination process.
• Apply auditing theory to various client situations.
• Document working papers and attestation reports in line with BDO policy.
• Contribute to the engagement team with ideas and opinions.
• Complete all appropriate documentation of BDO work papers.
• Ensure assigned work is performed in accordance with BDO methodology and requirements.
• Research basic and intermediate topics and form an initial opinion on the treatment independently.
• Attend professional development and training sessions on a regular basis.
• Complete required CPE hours to maintain applicable certifications.

Requirements

• Bachelor’s degree in Accounting, Computer Science, Management Information Systems, Business Administration, Managerial Marketing and Entrepreneurship, Finance or Economics, required.
• Master’s degree in Accounting and minor or dual major in Information Systems or other advanced degree, preferred.
• One (1) or more years of prior experience in IT, internal or external audit or relevant industry experience, required.
• Experience performing internal control reviews, preferred.
• Experience performing SOC, WebTrust, HITRUST, SOX, ISO 27001, and security/privacy advisory engagements, preferred.
• Relevant experience-based internship, preferred.
• One or more of the following certifications are preferred: Certified Public Accountant (CPA), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), ISO 27001 Lead Auditor certification, HITRUST Certified Common Security Framework Professional (CCSFP), Certified Internal Auditor (CIA), Certified Information Security Manager (CISM), Certified Ethical Hacker (CEH), Certified in Risk and Information Systems Control (CRISC), Certified in the Governance of Enterprise IT (CGEIT).
• Software proficiency in Microsoft Office Suite, specifically Word, Excel, and PowerPoint, required.
• Prior experience with various applications (e.g., ERP systems), operating systems (e.g., UNIX, Windows), and databases (e.g., Oracle, SQL), preferred.
• Exposure to cloud platforms, SaaS applications, security and engineering tools, and other industry software, preferred.
• Basic understanding and experience planning and coordinating the stages to perform technology-focused audits and assessments.
• Knowledge of internal controls and professional standards and regulations (SOC, ISO, WebTrust, HITRUST, Sarbanes-Oxley, etc.).
• Strong verbal and written communication skills with the ability to adapt style and messaging to effectively communicate and interact with professionals at all levels both within the client organization and the firm.
• Solid analytical and diagnostic skills and ability to break down complex issues and implement appropriate resolutions.
• Solid project management skills.
• Able to work in a demanding, deadline-driven environment with a focus on details and accuracy.

Qualifications

• Education: Bachelor’s degree in Accounting, Computer Science, Management Information Systems, Business Administration, Managerial Marketing and Entrepreneurship, Finance or Economics, required.
• Master’s degree in Accounting and minor or dual major in Information Systems or other advanced degree, preferred.
• Experience: One (1) or more years of prior experience in IT, internal or external audit or relevant industry experience, required.
• Experience: Experience performing internal control reviews, preferred.
• Experience: Experience performing SOC, WebTrust, HITRUST, SOX, ISO 27001, and security/privacy advisory engagements, preferred.
• Certifications: One or more of the following certifications are preferred: Certified Public Accountant (CPA), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), ISO 27001 Lead Auditor certification, HITRUST Certified Common Security Framework Professional (CCSFP), Certified Internal Auditor (CIA), Certified Information Security Manager (CISM), Certified Ethical Hacker (CEH), Certified in Risk and Information Systems Control (CRISC), Certified in the Governance of Enterprise IT (CGEIT).
• Software Proficiency: Software proficiency in Microsoft Office Suite, specifically Word, Excel, and PowerPoint, required.
• Technical Skills: Prior experience with various applications (e.g., ERP systems), operating systems (e.g., UNIX, Windows), and databases (e.g., Oracle, SQL), preferred.
• Exposure: Exposure to cloud platforms, SaaS applications, security and engineering tools, and other industry software, preferred.
• Knowledge: Basic understanding and experience planning and coordinating the stages to perform technology-focused audits and assessments.
• Professional Standards: Knowledge of internal controls and professional standards and regulations (SOC, ISO, WebTrust, HITRUST, Sarbanes-Oxley, etc.).
• Communication Skills: Strong verbal and written communication skills with the ability to adapt style and messaging to effectively communicate and interact with professionals at all levels both within the client organization and the firm.
• Project Management: Solid analytical and diagnostic skills and ability to break down complex issues and implement appropriate resolutions.
• Work Style: Solid project management skills.
• Environment: Able to work in a demanding, deadline-driven environment with a focus on details and accuracy.

Skills

• Knowledge of professional standards and auditing theory.
• Ability to apply auditing theory to various client situations.
• Proficiency in Microsoft Office Suite, specifically Word, Excel, and PowerPoint.
• Experience with various applications (e.g., ERP systems), operating systems (e.g., UNIX, Windows), and databases (e.g., Oracle, SQL).
• Understanding of internal controls and professional standards and regulations (SOC, ISO, WebTrust, HITRUST, Sarbanes-Oxley, etc.).
• Strong verbal and written communication skills.
• Ability to analyze and diagnose complex issues.
• Ability to manage multiple tasks and deadlines.

Benefits

No specific details provided in the job description.

Pay

No specific details provided in the job description.

Schedule

No specific details provided in the job description.

Company Overview

BDO is an Equal Opportunity Employer, including disability/vets. Click here to learn more about our benefits: BDO Total Rewards encompass more than traditional benefits. Click here to find out more !