Assurance Manager, Third Party Attestation

BDO USA, P.C. • Memphis, TN

8d • $110,000 - $160,000

About The Position

The Assurance Manager, Third Party Attestation is responsible for leading a team
of audit professionals in the planning, fieldwork, and wrap-up phases of
third-party attestation reports. This role focuses on various types of reports,
including System and Organization Controls (SOC) 1, SOC 2, SOC 3, SOC for
Cybersecurity, WebTrust for CAs, HITRUST, SSPA, ISO, MRC, and CSA STAR. The
Assurance Manager ensures compliance with the relevant governing standards and
regulations while documenting, validating, testing, and assessing control
systems, including internal controls. The team specializes in these specific
areas of third-party attestation reports to understand the entire technology
risk umbrella rather than maintaining overall knowledge in Information
Technology General Control (ITGC) audit or IT audit.

Requirements

• Bachelor’s degree in Accounting, Computer Science, Management Information Systems, Business Administration, Managerial Marketing and Entrepreneurship, Finance or Economics, required
• More than five (5) years of prior experience in IT, internal or external audit, required
• Supervisory experience, required
• One or more of the following certifications are required: Certified Public Accountant (CPA) Certified Information Systems Auditor (CISA) Certified Information Systems Security Professional (CISSP) ISO 27001 Lead Auditor certification HITRUST Certified Common Security Framework Professional (CCSFP) Certified Internal Auditor (CIA) Certified Information Security Manager (CISM) Certified Ethical Hacker (C | EH) Certified in Risk and Information Systems Control (CRISC) Certified in the Governance of Enterprise IT (CGEIT)
• Proficient in the use of Microsoft Office Suite, specifically Word, Excel and PowerPoint, preferred
• Excellent understanding and experience planning and coordinating the stages to perform technology-focused audits and assessments
• Strong knowledge of internal controls and professional standards and regulations (SOC, ISO, WebTrust, HITRUST, Sarbanes-Oxley, etc.)
• Strong analytical and diagnostic skills with the ability to break down complex issues and implement appropriate resolutions
• Ability to successfully multi-task while working independently and within a group environment
• Ability to work in a demanding, deadline driven environment with a focus on details and accuracy
• Strong project management skills with the ability to manage multiple projects simultaneously
• Able to effectively manage a team of professionals and delegate work assignments
• Ability to encourage a team environment on engagements, and contribute to the professional development of assigned personnel
• Build and maintain strong relationships with client personnel
• Executive presence and ability to act as primary contact on assigned engagements
• Strong verbal and written communication skills with the ability to adapt style and messaging to effectively communicate with professionals at all levels both within the client organization and the firm
• Ability to travel as necessary

Nice To Haves

• Master’s degree in Accounting and minor or dual major in Information Systems or other relevant advanced degree, preferred
• Experience performing SOC, WebTrust, HITRUST, SOX, ISO 27001 and security/privacy advisory engagements, preferred
• Prior experience with various applications (e.g., ERP systems), operating systems (e.g., UNIX, Windows); and databases (e.g., Oracle, SQL), preferred
• Exposure to cloud platforms, SaaS applications, security and engineering tools, and other industry software, preferred
• Knowledge of data analytics and emerging technologies, preferred

Responsibilities

• Applies knowledge and understanding of governing principles, applying these principles to clients and documenting and communicating an understanding and application of these principles
• Overseeing planning and executing attestation examinations, including obtaining an understanding of the control environment, designing test plans, evaluating deficiencies and assessing the overall control environment
• Identifying and prioritizing key risks, and assesses their impact and likeliness of occurrence
• Overseeing the documenting and validating of the operating effectiveness of the clients’ internal control system
• Overseeing the documenting of business and IT processes and controls and tests key controls for service organizations in a variety of industries
• Reviewing client attestation reports, ensuring accuracy, completeness and all supporting information is documented in the work papers and through appropriate testing
• Identifying, analyzing and discussing alternative principles with engagement leadership and client, as needed
• Developing and applying an advanced knowledge of auditing theory, a sense of audit skepticism and the use of BDO audit manuals in performing and supervising work
• Applying auditing theory to various client situations
• Documenting workpapers and attestation reports in line with BDO policy, identifying deviations and notifying the engagement partner in order to obtain appropriate approvals
• Applying knowledge to identify instances where testing may be reduced or expanded, and notifying the engagement partner of the occurrence
• Contributing ideas and opinions to the engagement team
• Serves as primary client contact for all questions and issues
• Develops and maintains relationships with client personnel and management
• Supervises the work of the engagement team, and reviews workpapers and conclusions, preferably onsite, during fieldwork
• Identifies and delegates functions of the engagement to the auditor in charge, as deemed appropriate
• Provides on the job training to less experienced team members
• Identifies complex issues, and brings them to a resolution with client and leadership
• Identifies and communicates suggestions to improve client internal controls and procedures to management and/or audit committee
• Drafts attestation reports, and effectively communicates contents to client
• Recognizes and applies new pronouncements to client situations
• Ensures technology is appropriately integrated into the examination process
• Ensuring completion of all appropriate documentation in BDO workpapers
• Conducting a detailed review to assure audit is completed in accordance with assurance manual standards
• Preparing and/or reviewing required communications to management and audit committees, ensuring timeliness and completeness
• Recommending appropriate outcomes to critical issues
• Initiating and preparing client acceptance/retention procedures, where appropriate
• Planning the audit process, and overseeing the execution of procedures with quality, efficiency and completeness despite pressures of deadlines
• Executing proper BDO methodology, including but not limited to proper archiving procedures
• Ensuring all work is performed in accordance with BDO methodology and requirements
• Researching complex topics and forming an opinion on the treatment independently
• Applying a comprehensive knowledge of all appropriate research tools, and drawing conclusions based upon appropriate research
• Preparing memos supporting research and conclusions, and consulting with others, if appropriate
• Presenting issues to technical reviewers effectively and accurately
• Oversees supervision of Associates and Senior Associates on all projects
• Schedules and manages the workload of Associates and Senior Associates
• Reviews work prepared by Associates and Senior Associates, and provides review comments
• Provides verbal and written performance feedback to Associates and Senior Associates
• Provides on the job learning to Associates and Senior Associates
• Acts as a Career Advisor to Associates and Senior Associates

Benefits

• BDO Total Rewards that encompass so much more than traditional “benefits.”
• ESOP offers participants a stake in the firm’s success through beneficial ownership and a unique opportunity to enhance their financial well-being.
• The annual allocation to the ESOP is fully funded by BDO through investments in company stock and grants employees the chance to grow their wealth over time as their shares vest and grow in value with the firm’s success, with no employee contributions.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees