Assurance Senior, Third Party Attestation

We need to output HTML fragment with sections: h3 headings for sections present with content. Must not repeat job title. Must not include Job ID etc. Must include only sections with real specific content. We need to parse the job description. Key sections: - Job Summary / Job Description: The description paragraphs about responsibilities. Could be under "About the role" or "Responsibilities". The instruction: use

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we need to map content to appropriate headings. We have: - Job Summary / Job Description: description of role: preparing third-party attestation reports, etc. That's responsibilities. - Job Duties: includes Control Environment, GAAS, Other, Methodology, Research, Other duties as required, Supervisory Responsibilities. That's duties. - Education Qualifications, Knowledge, Skills and Abilities: includes Education, Experience, License/Certifications, Software Proficiency, Language, Other Knowledge, Skills & Abilities. - About Us: description of company. - Benefits: mention of ESOP, Total Rewards, etc. Also mention "Individual salaries that are offered..." includes salary ranges per location. That's Pay. - No explicit Schedule. - No explicit Benefits besides ESOP and Total Rewards mention. There's "Learn more about our benefits: BDO Total Rewards encompass more than traditional benefits." So we have benefits content. Thus we can create sections:

Responsibilities

with paragraphs summarizing job summary and duties? Might split: Responsibilities (job summary) and Duties (detailed duties). But we can combine. Better: Use headings as per instruction: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We need to decide which sections have content. - About the role: could be the job summary paragraph. - Responsibilities: could be the job duties list. - Requirements: could be education, experience, certifications. - Qualifications: maybe overlapping with Requirements. But we can combine. - Skills: could be knowledge, skills & abilities. - Benefits: ESOP, Total Rewards. - Pay: salary ranges. - Schedule: not present, so omit. We must not create empty sections. We need to preserve all substantive information, not invent or summarize away detail. Must not omit details. So we need to include all details from the posting. Thus we need to embed the detailed bullet points etc. Use

• for any list of duties/requirements/benefits. We need to decide what constitutes a list. Many sentences are prose; we can keep as

  . For lists like "Control Environment: ..." we could treat as list items? The instruction: Use

  • for any list of duties/requirements/benefits. So we need to identify lists. The job duties section includes multiple bullet-like paragraphs each starting with a bold heading? Actually the text: "Control Environment: Applies knowledge..." then "GAAS Applies knowledge..." then "Other Applies knowledge..." then "Methodology Applies knowledge..." then "Research Applies methodology..." then "Other duties as required" then "Supervisory Responsibilities Provides verbal..." etc. These are not bullet list but could be considered list of duties. We could wrap each duty as
  • . Similarly for requirements: Education, Experience, License/Certifications, Software Proficiency, Language, Other Knowledge, Skills & Abilities. We need to preserve all substantive information: So we need to include the text exactly as given (maybe minor formatting). We cannot invent or summarize away detail. So we need to copy the text. Thus we can produce:

    About the role

    The Assurance Senior, Third Party Attestation is responsible for the preparation of third-party attestation reports, including System and Organization Controls (SOC) 1, SOC 2, SOC 3, SOC for Cybersecurity and WebTrust for CAs, as well as HITRUST, SSPA, ISO, MRC and CSA STAR applying most areas of the governing standard as necessary and documenting, validating, testing, and assessing various control systems, including internal controls. TPA individuals specialize in these specific areas to understand the entire technology risk umbrella rather than maintaining overall knowledge in Information Technology General Control (ITGC) audit or IT audit.

    Then responsibilities: maybe we can list duties as
    • ... each duty paragraph. We need to include all duty paragraphs exactly as they appear. Let's extract duty paragraphs from the text: From "Job Duties" section: "Control Environment: Applies knowledge and understanding of the collective effect of various factors on establishing or enhancing effectiveness, or mitigating the risks, of specific policies and procedures by: Identifying and considering all applicable policies, laws, rules, and regulations of the firm, regulators, or other authoritative bodies as part of engagement team Making constructive suggestions to improve client internal controls and accounting procedures Documenting and validating the operating effectiveness of the clients’ internal control system Supervising and reviewing the work of staff Documenting business and IT processes and controls and tests key controls for service organizations in a variety of industries Identifying and prioritizing key risks and assesses their impact and likeliness of occurrence. Communicating to the client areas to improve processes, strengthen controls, mitigate risks, and/or increase efficiency Developing and maintaining relationships with client personnel and management; and Ensuring technology is appropriately integrated into the examination process" "GAAS Applies knowledge and understanding of professional standards; application of the principles contained in professional standards; and the ability to document and communicate an understanding and application of professional standards on an engagement by: Developing and applying an intermediate knowledge of auditing theory, a sense of audit skepticism, and the use of BDO audit manuals Applying auditing theory to various client situations Documenting working papers and attestation reports in line with BDO policy, identifying deviations and notifying more senior team members in order to obtain appropriate approvals Applying knowledge to identify instances where testing may be reduced or expanded and notifying more senior team members of the occurrence; and Contributing ideas and opinions to the engagement team" "Other Applies knowledge and understanding of governing principles; applying these principles to client transactions; and documenting and communicating an understanding and application of these principles by: Planning and executing attestation examinations including obtaining an understanding of the control environment, designing test plans, evaluating deficiencies and assessing the overall financial reporting control environment Reading and reviewing clients’ reports, ensuring accuracy and completeness, and also ensuring that all supporting information is documented in the workpapers and through appropriate testing Preparing required communications to the Client and the Audit Committee, as applicable Recognizing and applying new pronouncements to client situations Identifying, analyzing and discussing alternative principles with the Manager, Senior Manager and engagement partner and the client, as needed Identifying complex issues and brings them to the attention of superiors for resolution Coaching less experienced team members in new areas" "Methodology Applies knowledge and application of BDO standards to guide effective and efficient delivery of quality services and products by: Completing all appropriate documentation of BDO work papers; and Ensuring assigned work is performed in accordance with BDO methodology and requirements" "Research Applies methodology used to seek or maintain information from authoritative sources and to draw conclusions regarding a target issue based on the information by: Researching basic and intermediate accounting topics and forming an initial opinion on the treatment independently" "Other duties as required" "Supervisory Responsibilities Provides verbal and written performance feedback to Associates on assigned engagement teams Supervises the work assignments of Associates on assigned engagement teams Other duties as required" We need to keep these exactly. Now Education Qualifications, Knowledge, Skills and Abilities section: "Education Qualifications, Knowledge, Skills and Abilities: Bachelor’s degree, required; focus in Accounting, Computer Science, Management Information Systems, Business Administration, Managerial Marketing and Entrepreneurship, Finance or Economics, preferred Master’s degree in Accounting and minor or dual major in Information Systems or other relevant advanced degree, preferred Experience Two (2) or more years of experience in IT, internal or external audit, required One (1) or more year of supervisory experience, preferred Experience performing internal control reviews preferred Experience performing SOC, WebTrust, HITRUST, SOX, ISO 27001 and security/privacy advisory engagements, preferred License/Certifications One (1) or more of the following certifications, preferred: Certified Public Accountant (CPA) Certified Information Systems Auditor (CISA) Certified Information Systems Security Professional (CISSP) ISO 27001 Lead Auditor certification HITRUST Certified Common Security Framework Professional (CCSFP) Certified Internal Auditor (CIA) Certified Information Security Manager (CISM) Certified Ethical Hacker (C | EH) Certified in Risk and Information Systems Control (CRISC) Certified in the Governance of Enterprise IT (CGEIT) Software Proficiency in Microsoft Office Suite, specifically Word, Excel, and PowerPoint, required Experience with various applications (e.g., ERP systems), operating systems (e.g., UNIX, Windows); and databases (e.g., Oracle, SQL), preferred Exposure to cloud platforms, SaaS applications, security and engineering tools, and other industry software, preferred Language N/A Other Knowledge, Skills & Abilities Basic understanding and experience planning and coordinating the stages to perform technology-focused audits and assessments Knowledge of internal controls and professional standards and regulations (SOC, ISO, WebTrust, HITRUST, Sarbanes-Oxley, etc). Knowledge of data analytics and emerging technologies desired Strong verbal and written communication skills with the ability to adapt style and messaging to effectively communicate and interact with professionals at all levels both within the client organization and the firm Ability to successfully multi-task while working independently and within a group environment Solid analytical and diagnostic skills and ability to break down complex issues and implementing appropriate resolutions Capable of working in a demanding, deadline driven environment with a focus on details and accuracy Solid project management skills Ability to travel as necessary" We need to keep that. Then "Individual salaries that are offered to a candidate are determined after consideration of numerous factors including but not limited to the candidate’s qualifications, experience, skills, and geography. California Range: $85,000 - $125,000 Colorado Range: $78,000 - $85,000 Illinois Range: $79,000 - $90,000 Massachusetts Range: $85,000 - $95,000 NYC/Long Island/Westchester Range: $85,000 - $95,000" That's Pay. Then "About Us" paragraph: "At BDO, how we show up matters. We build strong relationships by supporting one another, our clients, and our communities with care, curiosity, and a commitment to helping one another grow and succeed. Here, you’ll find meaningful work, leaders invested in your success, and opportunities to build a career around what matters most to you. Our purpose is to be the people our clients count on to grow with confidence and achieve what matters most. Our values guide how we bring that purpose to life each day. Together, they shape how we work with one another, serve our clients, and create meaningful impact. BDO provides assurance, tax, and advisory services to clients across the U.S. and around the world. No matter your role, you’ll be part of a team helping clients navigate complexity and move forward with clarity. We are proud to be an ESOP company, offering participants a stake in the firm’s success through beneficial ownership and a unique opportunity to enhance their financial well-being. As a qualified retirement plan, the ESOP is a meaningful addition to our comprehensive compensation and Total Rewards benefits* offerings. It also reinforces an ownership mindset that strengthens our connection to one another, our clients, and the future we’re building together. Learn more about our benefits: BDO Total Rewards encompass more than traditional benefits. Click here to find out more ! Benefits may be subject to eligibility requirements." That's Benefits. We must remove EEO etc. So we cut after benefits. Now we need to output HTML fragment only. We'll structure:

      About the role

      ...

      Responsibilities

      • Control Environment: ...