Assurance Experienced Senior, Third Party Attestation

At BDO, how we show up matters. We build strong relationships by supporting one another, our clients, and our communities with care, curiosity, and a commitment to helping one another grow and succeed. Here, you’ll find meaningful work, leaders invested in your success, and opportunities to build a career around what matters most to you.

About the role

The Assurance Experienced Senior, Third Party Attestation will prepare third-party attestation reports, including System and Organization Controls (SOC) 1, SOC 2, SOC 3, SOC for Cybersecurity, WebTrust for CAs, HITRUST, SSPA, ISO, MRC, and CSA STAR. This role involves documenting, validating, testing, and assessing various control systems, including internal controls, with a focus on technology risk rather than general IT audit knowledge.

Responsibilities

• Identify and apply all applicable policies, laws, rules, and regulations from authoritative bodies during engagements.
• Make constructive suggestions to improve client internal controls and accounting procedures.
• Document and validate the operating effectiveness of clients’ internal control systems.
• Supervise and review the work of staff, including coaching and providing performance feedback.
• Document business and IT processes, controls, and test key controls for service organizations across industries.
• Identify and prioritize key risks, assessing their impact and likelihood of occurrence.
• Communicate with clients to improve processes, strengthen controls, mitigate risks, and increase efficiency.
• Develop and maintain relationships with client personnel and management.
• Ensure technology is appropriately integrated into the examination process.
• Apply auditing theory, audit skepticism, and BDO audit manuals to client situations.
• Document working papers and attestation reports in line with BDO policy, flagging deviations for senior team members.
• Identify instances where testing may be reduced or expanded and escalate to senior team members.
• Plan and execute attestation examinations, including understanding the control environment, designing test plans, evaluating deficiencies, and assessing the financial reporting control environment.
• Review clients’ reports for accuracy and completeness, ensuring supporting information is documented and tested.
• Prepare required communications for the client and Audit Committee.
• Apply new pronouncements to client situations and discuss alternative principles with managers, senior managers, partners, and clients as needed.
• Identify complex issues and escalate them to superiors for resolution.
• Complete all appropriate documentation of BDO work papers and ensure compliance with BDO methodology.
• Research basic and intermediate accounting topics and form initial opinions independently.
• Coordinate timing of planning, fieldwork, and review with the audit team and client.
• Assist engagement executives in developing the audit engagement budget and identify appropriate resources.
• Develop draft audit engagement planning documents, audit programs, and budgets.
• Establish responsibilities of individual audit staff for specific areas of audit work.
• Monitor and report engagement budget-to-actual performance and advise executives of potential overruns.
• Provide verbal and written performance feedback to associates on assigned engagement teams.
• Supervise the work assignments of associates on assigned engagement teams.
• Perform other duties as required.

Requirements

• Bachelor’s degree in Accounting, Computer Science, Management Information Systems, Business Administration, Managerial Marketing and Entrepreneurship, Finance, or Economics (required).
• Master’s degree in Accounting with a minor or dual major in Information Systems or another relevant advanced degree (preferred).
• More than three (3) years of prior experience in IT, internal, or external audit (required).
• More than one (1) year of prior supervisory experience (preferred).
• Experience performing internal control reviews (preferred).
• Experience performing SOC, WebTrust, HITRUST, SOX, ISO 27001, and security/privacy advisory engagements (preferred).

Qualifications

• One or more of the following certifications (preferred):
  • Certified Public Accountant (CPA)
  • Certified Information Systems Auditor (CISA)
  • Certified Information Systems Security Professional (CISSP)
  • ISO 27001 Lead Auditor certification
  • HITRUST Certified Common Security Framework Professional (CCSFP)
  • Certified Internal Auditor (CIA)
  • Certified Information Security Manager (CISM)
  • Certified Ethical Hacker (C | EH)
  • Certified in Risk and Information Systems Control (CRISC)
  • Certified in the Governance of Enterprise IT (CGEIT)
• Proficiency in Microsoft Office Suite, specifically Word, Excel, and PowerPoint (required).
• Prior experience with ERP systems, operating systems (e.g., UNIX, Windows), and databases (e.g., Oracle, SQL) (preferred).
• Exposure to cloud platforms, SaaS applications, security and engineering tools, and other industry software (preferred).

Skills

• Basic understanding and experience planning and coordinating technology-focused audits and assessments.
• Knowledge of internal controls and professional standards and regulations (SOC, ISO, WebTrust, HITRUST, Sarbanes-Oxley, etc.).
• Knowledge of data analytics and emerging technologies (desired).
• Strong verbal and written communication skills, with the ability to adapt style and messaging for professionals at all levels.
• Ability to multi-task successfully while working independently or within a group environment.
• Solid analytical and diagnostic skills, with the ability to break down complex issues and implement resolutions.
• Capable of working in a demanding, deadline-driven environment with a focus on details and accuracy.
• Solid project management skills.
• Ability to travel as necessary.

Pay

• California: $87,000 - $130,000
• Illinois: $80,000 - $109,000
• Minnesota: $85,000 - $100,000
• NYC/Long Island/Westchester: $90,000 - $115,000

Benefits

BDO offers a comprehensive Total Rewards package, including an Employee Stock Ownership Plan (ESOP) that provides participants with a stake in the firm’s success. Benefits may be subject to eligibility requirements. Learn more about BDO Total Rewards.