Soc/ IS Assurance Senior - Manager | 3 To 10 yrs

The SOC professional will be responsible for the preparation of third party attestation reports, including Service Organization Control (SOC) 1, SOC 2, and WebTrust for CAs, as well as HITRUST, and ISO, applying most areas of the governing standard as necessary and documenting, validating, testing and assessing various control systems. This position may also be involved in other business process or IS assurance related engagements, including SOX, IT general control testing for private company financial audit engagements, and agreed-upon procedure engagements.

Job Duties

Control Environment

• Applies knowledge and understanding of the collective effect of various factors on establishing or enhancing effectiveness, or mitigating the risks, of specific policies and procedures by:
• Identifying and considering all applicable policies, laws, rules, and regulations of the firm, regulators, or other authoritative bodies as part of engagement team;
• Communicating with the client to understand key IT and business processes, identifying key risks;
• Prioritizing key risks, and assesses their impact and likeliness of occurrence;
• Applying professional skepticism while evaluating the control effectiveness;
• Documenting business and IT processes and controls and tests key controls for service organizations in a variety of industries;
• Documenting and validating the operating effectiveness of the clients control;
• Developing and maintaining relationships with client personnel and management; and
• Ensuring technology is appropriately integrated into the examination process.

GAAS

• Applies knowledge and understanding of professional standards; application of the principles contained in professional standards; and the ability to document and communicate an understanding and application of professional standards on an engagement by:
• Developing and applying an intermediate knowledge of auditing theory, a sense of audit skepticism, and the use of BDO audit manuals;
• Applying auditing theory to various client situations;
• Documenting working papers and attestation reports in line with BDO policy, identifying deviations and notifying more senior team members in order to obtain appropriate approvals;
• Applying knowledge to identify instances where testing may be reduced or expanded and notifying more senior team members of the occurrence; and
• Contributing ideas and opinions to the engagement team.

Methodology

• Applies knowledge and application of BDO standards to guide effective and efficient delivery of quality services and products by:
• Completing all appropriate documentation of BDO work papers; and
• Ensuring assigned work is performed in accordance with BDO methodology and requirements.

Research

• Applies methodology used to seek or maintain information from authoritative sources and to draw conclusions regarding a target issue based on the information by:
• Researching basic and intermediate topics and forming an initial opinion on the treatment independently.

Training

• Attend professional development and training sessions on a regular basis
• Complete required CPE hours to maintain applicable certifications
• Other duties as required