IT Audit Assurance - Manager
for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content.
We need to parse the job description.
Key content:
- Intro about CohnReznick, but we can put under "About the role" maybe.
- "YOUR TEAM." description: IT Audit Group, SOC practitioners, SOC1 and SOC2 audits, internal control assessments and attestations.
- "WHY COHNREZNICK?" description: mission, work-life balance, Total Rewards package includes generous PTO, flexible work environment, expanded parental leave, extensive learning & development, paid time off to volunteer.
- "YOUR ROLE." responsibilities list.
- "Your Experience." qualifications.
- Salary range: In New York City, salary range for an Assurance Manager is $105,000 to $175,000. Also mention discretionary performance bonus etc.
- Benefits: mention generous PTO, flexible work environment, expanded parental leave, extensive learning & development, paid time off to volunteer, discretionary performance bonus.
- Schedule: remote position, may be required to be present at office with scheduled notice for client work, team meetings, trainings. So schedule info: remote, occasional office presence.
We need to avoid boilerplate: EEO, legal, etc. Remove duplicated lines.
We need to not repeat job title as heading. No Job ID.
We need to use for section headings. Use - for any list of duties/requirements/benefits. Use
for prose.
We need to include sections only when posting has real specific content.
Potential sections:
- About the role (intro + team + why CohnReznick maybe). Could combine.
- Responsibilities (list from "YOUR ROLE." responsibilities).
- Qualifications (maybe "Your Experience." includes education, certifications, experience, skills).
- Skills (maybe separate list of technical skills: ITGCs, etc.)
- Benefits (list from WHY COHNREZNICK? plus bonus etc.)
- Pay (salary range)
- Schedule (remote/hybrid details)
We need to ensure we don't create sections with filler like "commensurate with experience". Not present.
Let's extract specifics.
About the role: Could include description of firm, IT Audit team, SOC practitioners, mission, etc. But we need to avoid too generic? The instruction: Prefer a few substantive sections over many thin ones. So maybe combine About the role, Responsibilities, Qualifications, Benefits, Pay, Schedule.
We need to ensure we don't duplicate content.
Let's draft:
About the role
CohnReznick is a top professional services firm providing advisory, assurance, and tax services through CohnReznick LLP and CohnReznick Advisory LLC. The IT Audit team within the National Assurance practice focuses on SOC 1 and SOC 2 audits, internal control assessments, and attestations for third‑party service providers. This is a remote Manager position; while most work can be done from anywhere, occasional office attendance may be required for client work, team meetings, or trainings.
That seems good.
Responsibilities
- Lead the planning, scoping, execution, and reporting of a portfolio of IT audits supporting public and private company external financial statement audits and SOC 1 and SOC 2 engagements.
- Lead SOC readiness assessments to identify control weaknesses and opportunities for improvement, draft observations for client leadership, and conduct follow‑up activities regarding remediation.
- Proactively communicate status to the IT Assurance lead Partner and work integrated with firm leadership and Audit Partners on public company audits.
- Demonstrate ability to identify and address client needs: build solid client relationships, develop awareness of firm services, communicate clearly and knowledgeably, deliver clear requests for information.
- Possess supervisory skills to supervise, guide, and coach activities of department staff with varying skill sets.
- Demonstrate effective planning, coordination, time management, and organization skills.
- Show flexibility in prioritizing and completing assignments on time and within budget.
- Demonstrate attention to detail, strong organization skills, and ability to be agile and adaptable.
- Perform thorough review of work papers to ensure procedures are completed, conclusions supported, and firm’s quality control procedures adhered to.
- Contribute technical expertise to engagements and to the learning and development growth of the team.
- Maintain demonstrated knowledge in ITGCs, IT application controls, cloud (AWS, Azure), cybersecurity, regulatory frameworks, and IT infrastructure including databases, networks, and operating systems.
- Nice to have: proficiency in data analytics using CAAT tools and ERP systems such as SAP, Oracle, JDE security.
Qualifications
- Bachelor's degree in Accounting and Computer Science/Information Systems; Master’s degree a plus.
- CISA required; CPA nice to have.
- 6+ years' relevant work experience.
- Prior experience managing several engagements simultaneously with competing deadlines.
- Outstanding interpersonal skills including written and verbal communication.
- Excellent computer skills including the suite of Microsoft products.
- Ability to travel and work overtime when necessary.
Maybe also include Skills as separate? Could combine technical skills into Qualifications or separate Skills section. The instruction: Use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we could have Skills section for technical skills like ITGCs, cloud, etc. But we already included some in responsibilities. Might be better to separate Skills.
Let's extract technical skills: "Demonstrated knowledge in ITGCs, IT application controls, the cloud - AWS, Azure, Cybersecurity, regulatory frameworks as well as IT infrastructure including databases, networks and operating systems." Also "Nice to haves – proficiency in data analytics using CAAT tools, and ERP systems such as SAP, Oracle, JDE security."
Thus Skills section.
Qualifications could focus on education, certifications, experience, interpersonal, travel.
Let's do:
Skills
- IT General Controls (ITGCs) and IT application controls.
- Cloud platforms: AWS, Azure.
- Cybersecurity knowledge.
- Understanding of regulatory frameworks (e.g., SOX, SOC).
- IT infrastructure: databases, networks, operating systems.
- Data analytics using CAAT tools (nice to have).
- ERP systems: SAP, Oracle, JDE security (nice to have).
Benefits
- Generous paid time off (PTO).
- Flexible work environment.
- Expanded and inclusive parental leave.
- Extensive learning & development opportunities.
- Paid time off for volunteering.
- Discretionary performance bonus.
Pay
In New York City, the salary range for an Assurance Manager is $105,000.00 to $175,000.00, plus a discretionary performance bonus.
Schedule
This is a remote position; while most work can be performed from any location, occasional office attendance may be required with scheduled notice for client work, team meetings, or trainings.
We need to ensure we didn't include boilerplate like EEO, legal, etc. We removed.
Check for duplicate content: We have responsibilities covering many items; qualifications covering education/experience; skills covering technical; benefits covering perks; pay covering salary; schedule covering remote/hybrid.
Check that we didn't miss any substantive info: The "YOUR TEAM." description about IT Audit Group and SOC practitioners is covered in About the role paragraph. The "WHY COHNREZNICK?" mission and work-life balance is covered in Benefits (maybe also mention mission). Could add a sentence about mission in About the role? But we already have benefits covering many items; mission could be part of About the role but not required. The instruction: Preserve ALL substantive information; do NOT invent or summarize away detail. So we need to include the mission statement: "At CohnReznick, we’re united by a common mission to create opportunity, value, and trust for our clients, our people, and our communities." Also mention working alongside peers, volunteering, balancing work with everyday life, enjoyment and fun. That's substantive. We could incorporate that into About the role or Benefits. Since Benefits already includes PTO, parental leave, learning, volunteer time off; we could add a sentence about mission and work-life balance in About the role.
Let's adjust About the role paragraph to include mission and work-life balance.
Also we need to include "We invest in a robust Total Rewards package that includes everything from generous PTO, a flexible work environment, expanded parental leave, extensive learning & development, and even paid time off for employees to volunteer." That's basically benefits list we have.
Thus About the role could include firm description, mission, work-life balance, remote nature.
Let's rewrite About the role:
About the role
CohnReznick is a top professional services firm providing advisory, assurance, and tax services through CohnReznick LLP and CohnReznick Advisory LLC. The IT Audit team within the National Assurance practice focuses on SOC 1 and SOC 2 audits, internal control assessments, and attestations for third‑party service providers. At CohnReznick, we’re united by a common mission to create opportunity, value, and trust for our clients, our people, and our communities, and we believe in balancing work with everyday life – making time for enjoyment and fun. This is a remote Manager position; while most work can be performed from any location, occasional office attendance may be required with scheduled notice for client work, team meetings, or trainings.
That captures mission and work-life balance.
Now Benefits section: we can list the specific items from Total Rewards: generous PTO, flexible work environment, expanded parental leave, extensive learning & development, paid time off to volunteer, discretionary performance bonus. Also maybe mention "robust Total Rewards package". That's fine.
Now ensure we didn't include any boilerplate like "CohnReznick is an equal opportunity employer" etc. We removed.
Check for any leftover duplicated lines: We removed "Your Experience." heading but we used Qualifications.
Check for any mention of "Universal Job Standards" etc - removed.
Check for any mention of "In New York City, the salary range for an Assurance Manager is $105,000.00 to $175,000.00." We used that.
Check for any mention of "CohnReznick LLP is a licensed CPA firm" etc - that's boilerplate legal; we removed.
Check for any mention of "CohnReznick Advisory LLC provides tax and business consulting services" - could be considered part of firm description but we already have advisory/assurance/tax. Might be okay to keep generic. It's not boilerplate? It's factual but maybe considered part of firm description. We already said advisory, assurance, and tax services through CohnReznick LLP and CohnReznick Advisory LLC. That's enough.
Now ensure we didn't miss any responsibilities: The responsibilities list includes leading planning, scoping, execution, reporting; SOC readiness assessments; communicate status; client needs; supervisory skills; planning coordination; flexibility; attention to detail; review work papers; contribute technical expertise; knowledge in ITGCs etc; nice to have data analytics and ERP
- for any list of duties/requirements/benefits. Use
for prose. We need to include sections only when posting has real specific content. Potential sections: - About the role (intro + team + why CohnReznick maybe). Could combine. - Responsibilities (list from "YOUR ROLE." responsibilities). - Qualifications (maybe "Your Experience." includes education, certifications, experience, skills). - Skills (maybe separate list of technical skills: ITGCs, etc.) - Benefits (list from WHY COHNREZNICK? plus bonus etc.) - Pay (salary range) - Schedule (remote/hybrid details) We need to ensure we don't create sections with filler like "commensurate with experience". Not present. Let's extract specifics. About the role: Could include description of firm, IT Audit team, SOC practitioners, mission, etc. But we need to avoid too generic? The instruction: Prefer a few substantive sections over many thin ones. So maybe combine About the role, Responsibilities, Qualifications, Benefits, Pay, Schedule. We need to ensure we don't duplicate content. Let's draft:
About the role
CohnReznick is a top professional services firm providing advisory, assurance, and tax services through CohnReznick LLP and CohnReznick Advisory LLC. The IT Audit team within the National Assurance practice focuses on SOC 1 and SOC 2 audits, internal control assessments, and attestations for third‑party service providers. This is a remote Manager position; while most work can be done from anywhere, occasional office attendance may be required for client work, team meetings, or trainings.
That seems good.Responsibilities
- Lead the planning, scoping, execution, and reporting of a portfolio of IT audits supporting public and private company external financial statement audits and SOC 1 and SOC 2 engagements.
- Lead SOC readiness assessments to identify control weaknesses and opportunities for improvement, draft observations for client leadership, and conduct follow‑up activities regarding remediation.
- Proactively communicate status to the IT Assurance lead Partner and work integrated with firm leadership and Audit Partners on public company audits.
- Demonstrate ability to identify and address client needs: build solid client relationships, develop awareness of firm services, communicate clearly and knowledgeably, deliver clear requests for information.
- Possess supervisory skills to supervise, guide, and coach activities of department staff with varying skill sets.
- Demonstrate effective planning, coordination, time management, and organization skills.
- Show flexibility in prioritizing and completing assignments on time and within budget.
- Demonstrate attention to detail, strong organization skills, and ability to be agile and adaptable.
- Perform thorough review of work papers to ensure procedures are completed, conclusions supported, and firm’s quality control procedures adhered to.
- Contribute technical expertise to engagements and to the learning and development growth of the team.
- Maintain demonstrated knowledge in ITGCs, IT application controls, cloud (AWS, Azure), cybersecurity, regulatory frameworks, and IT infrastructure including databases, networks, and operating systems.
- Nice to have: proficiency in data analytics using CAAT tools and ERP systems such as SAP, Oracle, JDE security.
Qualifications
- Bachelor's degree in Accounting and Computer Science/Information Systems; Master’s degree a plus.
- CISA required; CPA nice to have.
- 6+ years' relevant work experience.
- Prior experience managing several engagements simultaneously with competing deadlines.
- Outstanding interpersonal skills including written and verbal communication.
- Excellent computer skills including the suite of Microsoft products.
- Ability to travel and work overtime when necessary.
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we could have Skills section for technical skills like ITGCs, cloud, etc. But we already included some in responsibilities. Might be better to separate Skills. Let's extract technical skills: "Demonstrated knowledge in ITGCs, IT application controls, the cloud - AWS, Azure, Cybersecurity, regulatory frameworks as well as IT infrastructure including databases, networks and operating systems." Also "Nice to haves – proficiency in data analytics using CAAT tools, and ERP systems such as SAP, Oracle, JDE security." Thus Skills section. Qualifications could focus on education, certifications, experience, interpersonal, travel. Let's do:
Skills
- IT General Controls (ITGCs) and IT application controls.
- Cloud platforms: AWS, Azure.
- Cybersecurity knowledge.
- Understanding of regulatory frameworks (e.g., SOX, SOC).
- IT infrastructure: databases, networks, operating systems.
- Data analytics using CAAT tools (nice to have).
- ERP systems: SAP, Oracle, JDE security (nice to have).
Benefits
- Generous paid time off (PTO).
- Flexible work environment.
- Expanded and inclusive parental leave.
- Extensive learning & development opportunities.
- Paid time off for volunteering.
- Discretionary performance bonus.
Pay
In New York City, the salary range for an Assurance Manager is $105,000.00 to $175,000.00, plus a discretionary performance bonus.
Schedule
This is a remote position; while most work can be performed from any location, occasional office attendance may be required with scheduled notice for client work, team meetings, or trainings.
We need to ensure we didn't include boilerplate like EEO, legal, etc. We removed. Check for duplicate content: We have responsibilities covering many items; qualifications covering education/experience; skills covering technical; benefits covering perks; pay covering salary; schedule covering remote/hybrid. Check that we didn't miss any substantive info: The "YOUR TEAM." description about IT Audit Group and SOC practitioners is covered in About the role paragraph. The "WHY COHNREZNICK?" mission and work-life balance is covered in Benefits (maybe also mention mission). Could add a sentence about mission in About the role? But we already have benefits covering many items; mission could be part of About the role but not required. The instruction: Preserve ALL substantive information; do NOT invent or summarize away detail. So we need to include the mission statement: "At CohnReznick, we’re united by a common mission to create opportunity, value, and trust for our clients, our people, and our communities." Also mention working alongside peers, volunteering, balancing work with everyday life, enjoyment and fun. That's substantive. We could incorporate that into About the role or Benefits. Since Benefits already includes PTO, parental leave, learning, volunteer time off; we could add a sentence about mission and work-life balance in About the role. Let's adjust About the role paragraph to include mission and work-life balance. Also we need to include "We invest in a robust Total Rewards package that includes everything from generous PTO, a flexible work environment, expanded parental leave, extensive learning & development, and even paid time off for employees to volunteer." That's basically benefits list we have. Thus About the role could include firm description, mission, work-life balance, remote nature. Let's rewrite About the role:About the role
CohnReznick is a top professional services firm providing advisory, assurance, and tax services through CohnReznick LLP and CohnReznick Advisory LLC. The IT Audit team within the National Assurance practice focuses on SOC 1 and SOC 2 audits, internal control assessments, and attestations for third‑party service providers. At CohnReznick, we’re united by a common mission to create opportunity, value, and trust for our clients, our people, and our communities, and we believe in balancing work with everyday life – making time for enjoyment and fun. This is a remote Manager position; while most work can be performed from any location, occasional office attendance may be required with scheduled notice for client work, team meetings, or trainings.
That captures mission and work-life balance. Now Benefits section: we can list the specific items from Total Rewards: generous PTO, flexible work environment, expanded parental leave, extensive learning & development, paid time off to volunteer, discretionary performance bonus. Also maybe mention "robust Total Rewards package". That's fine. Now ensure we didn't include any boilerplate like "CohnReznick is an equal opportunity employer" etc. We removed. Check for any leftover duplicated lines: We removed "Your Experience." heading but we used Qualifications. Check for any mention of "Universal Job Standards" etc - removed. Check for any mention of "In New York City, the salary range for an Assurance Manager is $105,000.00 to $175,000.00." We used that. Check for any mention of "CohnReznick LLP is a licensed CPA firm" etc - that's boilerplate legal; we removed. Check for any mention of "CohnReznick Advisory LLC provides tax and business consulting services" - could be considered part of firm description but we already have advisory/assurance/tax. Might be okay to keep generic. It's not boilerplate? It's factual but maybe considered part of firm description. We already said advisory, assurance, and tax services through CohnReznick LLP and CohnReznick Advisory LLC. That's enough. Now ensure we didn't miss any responsibilities: The responsibilities list includes leading planning, scoping, execution, reporting; SOC readiness assessments; communicate status; client needs; supervisory skills; planning coordination; flexibility; attention to detail; review work papers; contribute technical expertise; knowledge in ITGCs etc; nice to have data analytics and ERP