Assurance Manager, Technology Risk Assurance

BDO USA•New York, NY

22h

About The Position

The Assurance Manager, Technology Risk Assurance leads teams in planning and performing IT risk and control work in complex environments. The manager designs the scope of procedures and ensures their appropriate execution, including reviewing, documenting, testing, and evaluating information technology processes across potentially multiple engagements. The role applies business and industry knowledge to client services, and works with clients and other professionals to establish the scope and strategy of engagements. It includes documenting business and IT processes and controls, testing key controls, reviewing workpapers and conclusions, communicating opportunities to improve processes and mitigate risks, and maintaining client relationships. The manager applies auditing standards and BDO methodology, plans and oversees audit procedures, evaluates issues and deficiencies, and communicates results to clients. The manager also supervises associates and senior associates, manages their workload and engagement deadlines, reviews their work, provides performance feedback, and supports their professional development through coaching and on-the-job training. Travel of up to 30% may be required.

Requirements

Bachelor’s degree required; preferred focus in Business Administration, Accounting, Computer Science, or Information Systems.
At least five years of IT audit and/or related risk and controls experience.
Experience performing general and application control reviews.
One or more of the following certifications required: CPA, CISA, CISM, CRISC, CGEIT, CISSP, and/or CFE.
Proficiency in Microsoft Office Suite.
Excellent verbal and written communication skills.
Strong analytical and basic research skills.
Solid organizational skills, attention to detail, and ability to meet project deadlines.
Ability to multitask independently or within a group and handle multiple projects in a deadline-driven environment.
Ability to manage a team of professionals and delegate work assignments.
Ability to build and maintain strong relationships with client personnel and contribute to an effective engagement team environment.
Ability to support the professional development of assigned personnel and interact successfully with professionals at all levels.
Advanced knowledge of internal controls.

Nice To Haves

Master’s degree in Information Systems.
Experience reviewing and testing third-party attestation (SOC) reports.
Experience in public accounting and internal auditing environments.
Exposure to various industry ERP applications.

Responsibilities

Lead teams in planning and performing IT risk and control work across complex environments and multiple engagements.
Design the scope of procedures and ensure the team appropriately executes, reviews, documents, tests, and evaluates IT processes.
Work with core assurance professionals and clients to establish engagement scope and strategy, and communicate with the team about complex issues and conclusions.
Document clients’ business and IT processes and controls, test key controls, and review workpapers and conclusions during audit field work.
Communicate ways for clients to improve processes, strengthen controls, mitigate risks, and increase efficiency; maintain relationships with client personnel and management.
Apply auditing theory, professional skepticism, audit standards, BDO audit manuals, and BDO methodology to client situations and engagements.
Identify complex issues and deviations, determine when testing may be reduced or expanded, and recommend outcomes to critical issues.
Plan and oversee audit procedures, conduct general and detailed reviews, and help ensure quality, efficiency, and compliance with applicable standards and methodology from engagement acceptance through archive.
Plan and execute IT audits, including understanding the control environment, designing test plans, evaluating deficiencies, and assessing the overall financial reporting control environment.
Review client information and control documentation for accuracy and completeness, and ensure supporting information is documented in workpapers and supported by appropriate testing.
Coach less experienced team members and provide on-the-job training and professional development.
Supervise associates and senior associates, establish deadlines, manage workload, review work and provide comments, and give verbal and written performance feedback.
Track engagement status, schedule, and budget for reporting to the team and client; serve as the primary engagement contact as assigned.
Perform other duties as required.
Travel up to 30%.