Contract Senior Associate, SOC

About the role

Schellman is a Top 50 CPA firm and a leading provider of attestation and compliance services. Our professional services focus on security and privacy audits, assessments, and certifications. Schellman has become one of the largest cybersecurity assessment firms in the United States without providing any traditional accounting services. We are an accredited multi-framework ISO Certification Body for security, privacy, business continuity, and quality; a globally licensed PCI Qualified Security Assessor and a top provider to clients serving the federal DoD space as a leading FedRAMP 3PAO and the first assessment firm authorized as a CMMC C3PAO. Our specialty and expertise remain in providing best in class Cybersecurity and IT Audits and Attestations.

Responsibilities

• Demonstrate proficiency in Schellman Methodology
• Serve as a guide to Associates and peers through information sharing, support, and thought leadership
• Successfully run a project from fieldwork through completion including the following:
• Demonstrate the ability to successfully complete all assigned testing, workpaper documentation, testing exception documentation, draft report creation, and management representation letter preparation
• Understand and demonstrate ability to speak to Schellman's service lines at a high level and their leaders
• Demonstrate proficiency of SOC 1 ITGCs and each Security, Availability, Processing Integrity, Confidentiality, and Privacy SOC 2 criteria
• Demonstrate understanding of Principal Service Commitments and System Requirements (PSCRs) and how they impact scope of a SOC 2
• Derive PSCRs through client documentation and interviews
• Know all four report opinion outcomes and ability to draft modified opinions
• Demonstrate ability to identify if exception(s) would potentially yield a qualified opinion
• Demonstrate self-organization, consistently and proactively look ahead to future projects, and prepare accordingly
• Accurately manage and report time worked to each project / initiative
• Define a clear communication strategy with the project manager to ensure any testing delays, disclosures, etc. are discussed timely

Qualifications

• Working knowledge of Schellman’s services, methodology, and relevant professional standards
• Requisite knowledge of applicable technology and security domains
• High level of attention to detail and quality of work product
• Client service oriented
• Excellent time management, organizational, and verbal and written communication skills
• Capable of simultaneously managing assigned tasks for multiple projects
• Proficient using Microsoft Word, Excel, and PowerPoint, as well as Schellman’s service delivery applications
• Full understanding and application of ethics, independence and Schellman’s values

Skills

• Working knowledge of Schellman’s services, methodology, and relevant professional standards
• Requisite knowledge of applicable technology and security domains
• High level of attention to detail and quality of work product
• Client service oriented
• Excellent time management, organizational, and verbal and written communication skills
• Capable of simultaneously managing assigned tasks for multiple projects
• Proficient using Microsoft Word, Excel, and PowerPoint, as well as Schellman’s service delivery applications
• Full understanding and application of ethics, independence and Schellman’s values

Benefits

Connecting, collaborating and continuous education are also highly valued and therefore we require some travel annually for our Internal Service Delivery roles, which can include in-person training, team meet-ups, and strategy meetings.

Pay

Competitive compensation package including base salary, bonus, and benefits.

Schedule

Flexible schedule to accommodate remote work and occasional travel.