IT Attest Experienced Associate

Job Responsibilities

• Execute SOC 1 and SOC 2 examinations (Type I and Type II), including planning, walkthroughs, and control testing.
• Document and assess control design and operating effectiveness against applicable criteria (e.g., SOC Trust Services Criteria and relevant financial reporting control objectives).
• Perform evidence requests, collection, and validation; evaluate completeness, accuracy, and timeliness of client-provided documentation and system outputs.
• Leverage compliance platforms (e.g., Vanta, Drata) to map controls to criteria, streamline evidence collection, track testing status, and support continuous monitoring workflows.
• Use AI-enabled audit and analysis tools to summarize and triage evidence, identify exceptions and anomalies, and improve consistency in workpaper documentation (with appropriate professional judgment and review).
• Prepare clear workpapers and testing narratives, including procedures performed, results, and conclusions, aligned to firm methodology and AICPA attestation standards.
• Assist in drafting SOC report sections and client deliverables, including incorporation of management responses and remediation plans.
• Clock with client stakeholders and internal teams to manage timelines, resolve evidence gaps, and communicate testing progress and issues.

Requirements

• Bachelor’s degree in Accounting, Information Systems, Cybersecurity, or a related field (or equivalent experience).
• 1+ year of public accounting or assurance experience with exposure to SOC 1 and/or SOC 2 examinations (Type I/Type II).
• Direct experience performing IT General Controls (ITGC) testing across key domains, including Logical Access, Change Management, IT Operations, and System Development Lifecycle (SDLC), as applicable to the engagement scope.
• Familiarity with AICPA attestation standards and SOC 2 Trust Services Criteria (Security, Availability, Processing Integrity, Confidentiality, Privacy).
• Experience using compliance/audit platforms (e.g., Vanta, Drata).
• Strong written communication skills for clear workpaper documentation and client-ready deliverables; proficiency with Microsoft Office.

Preferred Qualifications

• Achieved or working towards CPA or CISA certification.