Senior Associate, SOC

About the role

Schellman is a Top 50 CPA firm and a leading provider of attestation and compliance services. Our professional services focus on security and privacy audits, assessments, and certifications. Senior associates are primarily responsible for hands-on project execution.

Responsibilities

• Demonstrate proficiency in Schellman Methodology
• Serve as a guide to Associates and peers through information sharing, support, and thought leadership
• Earn Schellman-approved certifications (CCSK, ISO Lead Auditor, CCSP/CISA, CISSP, AWS CCP, etc.)
• Successfully run a project from fieldwork through completion including the following:
• Demonstrate the ability to successfully complete all assigned testing, workpaper documentation, testing exception documentation, draft report creation, and management representation letter preparation
• Understand and demonstrate ability to speak to Schellman's service lines at a high level and their leaders
• Demonstrate proficiency of SOC 1 ITGCs and each Security, Availability, Processing Integrity, Confidentiality, and Privacy SOC 2 criteria
• Demonstrate understanding of Principal Service Commitments and System Requirements (PSCRs) and how they impact scope of a SOC 2
• Derive PSCRs through client documentation and interviews
• Know all four report opinion outcomes and ability to draft modified opinions
• Demonstrate ability to identify if exception(s) would potentially yield a qualified opinion
• Accurately manage and report time worked to each project / initiative
• Define a clear communication strategy with the project manager to ensure any testing delays, disclosures, etc. are discussed timely

Requirements

• Working knowledge of Schellman’s services, methodology, and relevant professional standards
• Requisite knowledge of applicable technology and security domains
• High level of attention to detail and quality of work product
• Client service oriented
• Excellent time management, organizational, and verbal and written communication skills
• Capable of simultaneously managing assigned tasks for multiple projects
• Proficient using Microsoft Word, Excel, and PowerPoint, as well as Schellman’s service delivery applications

Qualifications

• Bachelor's degree in accounting, finance, business management, technology, or other relevant subject area, or equivalent years of experience directly related to the duties and responsibilities specified
• 2+ years of related professional services experience in information security auditing, assessment, consulting or compliance, focused on ITGC or SOC controls
• Ability to work well independently, within a team and with clients as well as travel ~40-50% (M-Th)
• Maintains (preferred) or working towards obtaining least one certification relevant to Schellman's services (i.e. CPA, CCSK or CISA)