Assurance Manager, Third Party Attestation

Job Summary:

The Assurance Manager, Third Party Attestation is responsible for leading a team of audit professionals in the planning, fieldwork, and wrap-up phases of third-party attestation reports. This role focuses on various types of reports, including System and Organization Controls (SOC) 1, SOC 2, SOC 3, SOC for Cybersecurity, WebTrust for CAs, HITRUST, SSPA, ISO, MRC, and CSA STAR. The Assurance Manager ensures compliance with the relevant governing standards and regulations while documenting, validating, testing, and assessing control systems, including internal controls. The team specializes in these specific areas of third-party attestation reports to understand the entire technology risk umbrella rather than maintaining overall knowledge in Information Technology General Control (ITGC) audit or IT audit.

Job Duties:

Control Environment:

• Applies knowledge and understanding of governing principles, applying these principles to clients and documenting and communicating an understanding and application of these principles by:
• Identifying and considering all applicable policies, laws, rules, and regulations of the firm, regulators, or other authoritative bodies as part of engagement team
• Applying a broad understanding of objectives and components of the overall control environment, organization and supervisory controls
• Overseeing planning and executing attestation examinations, including obtaining an understanding of the control environment, designing test plans, evaluating deficiencies and assessing the overall control environment
• Identifying and prioritizing key risks, and assesses their impact and likeliness of occurrence
• Overseeing the documenting and validating of the operating effectiveness of the clients’ internal control system    
• Overseeing the documenting of business and IT processes and controls and tests key controls for service organizations in a variety of industries
• Reviewing client attestation reports, ensuring accuracy, completeness and all supporting information is documented in the work papers and through appropriate testing
• Identifying, analyzing and discussing alternative principles with engagement leadership and client, as needed

GAAS:

• Applies knowledge and understanding of professional standards, application of the principles contained in professional standards and the ability to document and communicate an understanding and application of professional standards on an engagement by:
• Developing and applying an advanced knowledge of auditing theory, a sense of audit skepticism and the use of BDO audit manuals in performing and supervising work
• Applying auditing theory to various client situations
• Documenting workpapers and attestation reports in line with BDO policy, identifying deviations and notifying the engagement partner in order to obtain appropriate approvals
• Applying knowledge to identify instances where testing may be reduced or expanded, and notifying the engagement partner of the occurrence 
• Contributing ideas and opinions to the engagement team

Engagement Management:

• Serves as primary client contact for all questions and issues
• Develops and maintains relationships with client personnel and management
• Supervises the work of the engagement team, and reviews workpapers and conclusions, preferably onsite, during fieldwork
• Identifies and delegates functions of the engagement to the auditor in charge, as deemed appropriate
• Provides on the job training to less experienced team members
• Identifies complex issues, and brings them to a resolution with client and leadership 
• Identifies and communicates suggestions to improve client internal controls and procedures to management and/or audit committee
• Drafts attestation reports, and effectively communicates contents to client
• Recognizes and applies new pronouncements to client situations
• Ensures technology is appropriately integrated into the examination process

Methodology:

• Applies knowledge and application of BDO standards to guide effective and efficient delivery of quality services and products by:
• Ensuring completion of all appropriate documentation in BDO workpapers 
• Conducting a detailed review to assure audit is completed in accordance with assurance manual standards
• Preparing and/or reviewing required communications to management and audit committees, ensuring timeliness and completeness
• Recommending appropriate outcomes to critical issues
• Initiating and preparing client acceptance/retention procedures, where appropriate
• Planning the audit process, and overseeing the execution of procedures with quality, efficiency and completeness despite pressures of deadlines
• Executing proper BDO methodology, including but not limited to proper archiving procedures
• Ensuring all work is performed in accordance with BDO methodology and requirements

Research:

• Applies methodology used to seek or maintain information from authoritative sources and to draw conclusions regarding a target issue based on the information by:
• Researching complex topics and forming an opinion on the treatment independently
• Applying a comprehensive knowledge of all appropriate research tools, and drawing conclusions based upon appropriate research
• Preparing memos supporting research and conclusions, and consulting with others, if appropriate
• Presenting issues to technical reviewers effectively and accurately
• Other duties as required

Supervisory Responsibilities:

• Oversees supervision of Associates and Senior Associates on all projects
• Schedules and manages the workload of Associates and Senior Associates
• Reviews work prepared by Associates and Senior Associates, and provides review comments
• Provides verbal and written performance feedback to Associates and Senior Associates
• Provides on the job learning to Associates and Senior Associates
• Acts as a Career Advisor to Associates and Senior Associates

Qualifications, Knowledge, Skills and Abilities:

Education:

• Bachelor’s degree in Accounting, Computer Science, Management Information Systems, Business Administration, Managerial Marketing and Entrepreneurship, Finance or Economics, required
• Master’s degree in Accounting and minor or dual major in Information Systems or other relevant advanced degree, preferred

Experience:

• More than five (5) years of prior experience in IT, internal or external audit, required 
• Supervisory experience, required 
• Experience performing SOC, WebTrust, HITRUST, SOX, ISO 27001 and security/privacy advisory engagements, preferred

License/Certifications

• One or more of the following certifications are required: 
• Certified Public Accountant (CPA)
• Certified Information Systems Auditor (CISA)
• Certified Information Systems Security Professional (CISSP)
• ISO 27001 Lead Auditor certification
• HITRUST Certified Common Security Framework Professional (CCSFP) 
• Certified Internal Auditor (CIA)
• Certified Information Security Manager (CISM)
• Certified Ethical Hacker (C | EH)
• Certified in Risk and Information Systems Control (CRISC)
• Certified in the Governance of Enterprise IT (CGEIT)

Software

• Proficient in the use of Microsoft Office Suite, specifically Word, Excel and PowerPoint, preferred
• Prior experience with various applications (e.g., ERP systems), operating systems (e.g., UNIX, Windows); and databases (e.g., Oracle, SQL), preferred
• Exposure to cloud platforms, SaaS applications, security and engineering tools, and other industry software, preferred

Other Knowledge, Skills & Abilities:

• Excellent understanding and experience planning and coordinating the stages to perform technology-focused audits and assessments
• Strong knowledge of internal controls and professional standards and regulations (SOC, ISO, WebTrust, HITRUST, Sarbanes-Oxley, etc.)
• Knowledge of data analytics and emerging technologies, preferred
• Strong analytical and diagnostic skills with the ability to break down complex issues and implement appropriate resolutions
• Ability to successfully multi-task while working independently and within a group environment
• Ability to work in a demanding, deadline driven environment with a focus on details and accuracy
• Strong project management skills with the ability to manage multiple projects simultaneously
• Able to effectively manage a team of professionals and delegate work assignments
• Ability to encourage a team environment on engagements, and contribute to the professional development of assigned personnel
• Build and maintain strong relationships with client personnel
• Executive presence and ability to act as primary contact on assigned engagements
• Strong verbal and written communication skills with the ability to adapt style and messaging to effectively communicate with professionals at all levels both within the client organization and the firm
• Ability to travel as necessary

Individual salaries that are offered to a candidate are determined after consideration of numerous factors including but not limited to the candidate’s qualifications, experience, skills, and geography.

California Range: $120,000 - $160,000
Colorado Range: $110,000 - $150,000
Illinois Range: $110,000 - $130,000
Massachusetts Range: $110,000 - $150,000
NYC/Long Island/Westchester Range: $110,000 - $150,000