Assurance Senior, Technology Risk Assurance
About the Role
The Assurance Senior, Technology Risk Assurance is responsible for assisting in the planning of the IT audit engagement and executing the IT risk assessment and control evaluation to determine the impact of controls on financial audit procedures. This role involves designing and executing procedures to understand and test the client IT environment and related IT general controls (ITGCs), including IT system logical access, change management, and IT operational controls, as well as testing business process controls, key reports, and information produced by the entity (IPE) for various client industry environments. Additionally, the role includes providing training, mentoring, and technical guidance to IS Assurance Associates.
Responsibilities
- Apply knowledge and understanding of IT risks and controls by:
- Understanding and documenting client environments and the impact that IT has on related audit risks.
- Identifying controls that help mitigate the risks associated with IT in relation to the client environment.
- Obtaining and documenting an understanding of the client control environment, designing test procedures, conducting, and documenting tests of controls.
- Documenting results of procedures, as well as deficiencies, and assessing the impact of these procedures on the overall financial reporting control environment.
- Reading and reviewing client information and control documentation, ensuring accuracy and completeness of information, and ensuring that all supporting information is documented in the workpapers and appropriate testing is performed.
- Identifying complex issues and bringing them to the attention of the team and management for resolution.
- Communicating to the client areas to improve processes, strengthen controls, mitigate risks, and/or increase efficiency.
- Developing and maintaining relationships with client personnel and management.
- Apply knowledge and understanding of professional standards by:
- Applying knowledge of auditing theory, professional skepticism, and BDO audit manuals.
- Applying auditing standards and methodology to various client situations.
- Identifying complex issues, including deviations, and working through complex situations collaboratively with the team and client, seeking counsel from BDO technical experts as needed.
- Applying knowledge to identify instances where testing may be reduced or expanded and providing counsel to members of the audit team.
- Preparing and communicating results of procedures to the client.
- Plan and execute IT audits, including:
- Obtaining an understanding of the IT environment, risk, and controls.
- Designing and executing procedures to evaluate them.
- Build a knowledge base by reading and understanding methodology, relevant standards, and regulations.
- Read and review clients’ information and documentation, ensuring accuracy and completeness, and ensuring that all supporting information is documented in the workpapers and through appropriate testing.
- Apply BDO methodology, industry standards and guidance, and new pronouncements to client situations.
- Establish deadlines and execute procedures and oversight to meet set deadlines.
- Set the tone for teamwork by supporting others in their work and delivering on commitments made to team members and clients.
- Review work performed by associate staff, provide feedback, and detail-review all procedures performed.
- Teach/coach associate team members to provide on-the-job learning.
- Track status, schedule, and budget for reporting to the team and the client.
Requirements
- Bachelor’s degree in Accounting, Computer Science, or Information Systems (required).
- Master’s degree in Information Systems or other relevant advanced degree (preferred).
- More than two (2) years of IT audit and/or related risk and controls experience (required).
- More than one (1) year of supervisory experience (required).
- Public accounting experience (highly desired).
- Proficient with PCAOB and AICPA audit standards (required).
- Experience performing audit tests of design, implementation, and operating effectiveness procedures for public companies (preferred).
- Experience with performing review of and testing around third-party attestation (SOC) reports (preferred).
Skills
- Excellent verbal and written communication skills.
- Strong analytical and basic research skills.
- Solid organizational skills, especially the ability to meet project deadlines with a focus on details.
- Ability to successfully multi-task while working independently or within a group environment.
- Proven ability to work in a deadline-driven environment and handle multiple projects simultaneously.
- Ability to build and maintain strong relationships with client personnel.
- Ability to encourage a team environment on engagements and contribute to the professional development of assigned personnel.
- Ability to act as the primary contact on assigned engagements.
- Successfully interact with professionals at all levels.
- Advanced knowledge of internal controls.
- Proficient in the use of Microsoft Office Suite (required).
- Exposure to various industry ERP applications (highly preferred).
Qualifications
- CPA, CISA, CISM, CRISC, CGEIT, CISSP, and/or CFE certification (strongly preferred).
Pay
- California Range: $85,000 - $125,000
- Illinois Range: $78,000 - $87,000
- NYC/Long Island/Westchester Range: $80,000 - $115,000
Individual salaries that are offered to a candidate are determined after consideration of numerous factors including but not limited to the candidate’s qualifications, experience, skills, and geography.
Benefits
BDO provides a comprehensive compensation and Total Rewards benefits package, including an Employee Stock Ownership Plan (ESOP) that offers participants a stake in the firm’s success through beneficial ownership. Benefits may be subject to eligibility requirements.