Assurance Experienced Senior, Third Party Attestation

About the role

The Assurance Experienced Senior, Third Party Attestation will prepare third-party attestation reports, including SOC 1, SOC 2, SOC 3, SOC for Cybersecurity, WebTrust for CAs, HITRUST, SSPA, ISO, MRC and CSA STAR. The role involves applying governing standards to document, validate, test, and assess control systems, including internal controls, with a focus on the technology risk umbrella rather than overall ITGC or IT audit knowledge.

Responsibilities

• Identify and consider applicable policies, laws, rules, and regulations as part of the engagement team.
• Make constructive suggestions to improve client internal controls and accounting procedures.
• Document and validate the operating effectiveness of clients’ internal control systems.
• Supervise and review the work of staff.
• Document business and IT processes and controls, and test key controls for service organizations across industries.
• Identify and prioritize key risks, assess their impact and likelihood of occurrence.
• Communicate to clients areas to improve processes, strengthen controls, mitigate risks, and increase efficiency.
• Develop and maintain relationships with client personnel and management.
• Ensure technology is appropriately integrated into the examination process.
• Apply professional standards, including GAAS, with intermediate knowledge of auditing theory and professional skepticism.
• Document working papers and attestation reports in line with BDO policy, identifying deviations and notifying senior team members.
• Apply knowledge to identify instances where testing may be reduced or expanded and notify senior team members.
• Contribute ideas and opinions to the engagement team.
• Plan and execute attestation examinations, including understanding the control environment, designing test plans, evaluating deficiencies, and assessing the financial reporting control environment.
• Read and review clients’ reports, ensuring accuracy, completeness, and proper documentation in work papers and through testing.
• Prepare required communications to the client and the Audit Committee, as applicable.
• Recognize and apply new pronouncements to client situations.
• Identify, analyze, and discuss alternative principles with the Manager, Senior Manager, engagement partner, and client as needed.
• Identify complex issues and bring them to the attention of superiors for resolution.
• Coach less experienced team members in new areas.
• Complete appropriate documentation of BDO work papers and ensure assigned work is performed in accordance with BDO methodology and requirements.
• Research basic and intermediate accounting topics and form initial opinions independently.
• Coordinate timing of planning, fieldwork, and review with the audit team and client.
• Assist engagement executives in developing the audit engagement budget and identifying appropriate resources.
• Develop draft audit engagement planning documents, audit programs, and budgets.
• Establish with the engagement manager the responsibilities of individual audit staff for specific areas of audit work.
• Monitor and report engagement budget to actual and advise engagement executives of possible overruns.
• Provide verbal and written performance feedback to Associates on assigned engagement teams.
• Supervise the work assignments of Associates on assigned engagement teams.
• Teach and coach Associates to provide on-the-job learning.

Requirements

• Bachelor’s degree in Accounting, Computer Science, Management Information Systems, Business Administration, Managerial Marketing and Entrepreneurship, Finance, or Economics.
• More than three years of prior experience in IT, internal or external audit.

Qualifications

• Master’s degree in Accounting and minor or dual major in Information Systems or other relevant advanced degree, preferred.
• More than one year of prior supervisory experience, preferred.
• Experience performing internal control reviews, preferred.
• Experience performing SOC, WebTrust, HITRUST, SOX, ISO 27001 and security/privacy advisory engagements, preferred.

License/Certifications

• One or more of the following certifications are preferred: CPA, CISA, CISSP, ISO 27001 Lead Auditor, HITRUST CCSFP, CIA, CISM, CEH, CRISC, CGEIT.

Skills

• Proficiency in Microsoft Office Suite, specifically Word, Excel, and PowerPoint.
• Prior experience with ERP systems, UNIX, Windows, Oracle, and SQL, beneficial.
• Exposure to cloud platforms, SaaS applications, security and engineering tools, and other industry software, preferred.
• Basic understanding and experience planning and coordinating stages to perform technology-focused audits and assessments.
• Knowledge of internal controls and professional standards and regulations (SOC, ISO, WebTrust, HITRUST, Sarbanes-Oxley, etc.).
• Knowledge of data analytics and emerging technologies desired.
• Strong verbal and written communication skills with the ability to adapt style and messaging to professionals at all levels.
• Ability to multi-task while working independently and within a group environment.
• Solid analytical and diagnostic skills with the ability to break down complex issues and implement appropriate resolutions.
• Capable of working in a demanding, deadline-driven environment with a focus on details and accuracy.
• Solid project management skills.
• Ability to travel as necessary.

Pay

• California Range: $87,000 – $130,000
• Illinois Range: $80,000 – $109,000
• Minnesota Range: $85,000 – $100,000
• NYC/Long Island/Westchester Range: $90,000 – $115,000