Assurance Manager, Third Party Attestation

BDO USA • Boston, MA

23h • $110,000 - $160,000

About The Position

The Assurance Manager, Third Party Attestation leads audit professionals through the planning, fieldwork, and wrap-up phases of third-party attestation engagements. The role covers reports and frameworks including SOC 1, SOC 2, SOC 3, SOC for Cybersecurity, WebTrust for CAs, HITRUST, SSPA, ISO, MRC, and CSA STAR. The manager ensures compliance with applicable standards and regulations while documenting, validating, testing, and assessing control systems, including internal controls. The team specializes in third-party attestation and technology risk rather than maintaining broad ITGC or IT audit coverage.

The position oversees engagement delivery and quality, serves as the primary client contact, reviews workpapers and reports, manages client and firm communications, and supervises and develops Associates and Senior Associates. It also involves researching complex technical matters, applying professional standards and firm methodology, managing engagement risks and deadlines, and traveling as necessary.

Requirements

• Bachelor’s degree in Accounting, Computer Science, Management Information Systems, Business Administration, Managerial Marketing and Entrepreneurship, Finance, or Economics.
• More than five years of prior experience in IT, internal audit, or external audit.
• Supervisory experience.
• At least one required certification: CPA, CISA, CISSP, ISO 27001 Lead Auditor, HITRUST CCSFP, CIA, CISM, C|EH, CRISC, or CGEIT.
• Excellent understanding and experience planning and coordinating technology-focused audits and assessments.
• Strong knowledge of internal controls and professional standards and regulations, including SOC, ISO, WebTrust, HITRUST, and Sarbanes-Oxley.
• Strong analytical and diagnostic skills, including the ability to break down complex issues and implement appropriate resolutions.
• Ability to multitask independently and collaboratively in a demanding, deadline-driven environment, with attention to detail and accuracy.
• Strong project-management skills and ability to manage multiple projects simultaneously.
• Ability to manage a team of professionals, delegate assignments, foster teamwork, and contribute to personnel development.
• Ability to build and maintain strong relationships with client personnel and act as the primary contact on assigned engagements.
• Strong verbal and written communication skills and ability to adapt messaging for professionals at all levels within the client organization and firm.
• Ability to travel as necessary.

Nice To Haves

• Master’s degree in Accounting with a minor or dual major in Information Systems, or another relevant advanced degree.
• Experience performing SOC, WebTrust, HITRUST, SOX, ISO 27001, and security/privacy advisory engagements.
• Proficiency with Microsoft Office, specifically Word, Excel, and PowerPoint.
• Experience with applications such as ERP systems, operating systems such as UNIX or Windows, and databases such as Oracle or SQL.
• Exposure to cloud platforms, SaaS applications, security and engineering tools, and other industry software.
• Knowledge of data analytics and emerging technologies.

Responsibilities

• Lead and oversee planning, fieldwork, and wrap-up for third-party attestation examinations across applicable reporting frameworks.
• Identify relevant policies, laws, rules, regulations, governing principles, risks, and control-environment components for engagements.
• Design test plans; oversee documentation, validation, and testing of internal controls and business and IT processes; evaluate deficiencies and the overall control environment.
• Review attestation reports, workpapers, supporting documentation, test results, and engagement conclusions for accuracy, completeness, and compliance with standards.
• Apply auditing theory, professional standards, BDO audit manuals, and firm policies; identify deviations and notify the engagement partner when approvals are needed.
• Assess whether testing should be reduced or expanded and communicate relevant issues to engagement leadership.
• Serve as the primary client contact, maintain relationships with client personnel and management, and resolve complex issues with clients and leadership.
• Supervise engagement teams, review workpapers and conclusions, delegate work, and provide on-the-job training and development to team members.
• Communicate recommendations for improving client controls and procedures to management or audit committees; draft and explain attestation reports.
• Integrate technology appropriately into the examination process and recognize and apply new pronouncements to client situations.
• Ensure engagements follow BDO methodology, assurance-manual standards, documentation and archiving requirements, and quality expectations.
• Prepare or review timely and complete communications to management and audit committees; recommend outcomes for critical issues and initiate client acceptance or retention procedures when appropriate.
• Research complex topics using authoritative sources, form and document conclusions, prepare research memoranda, and present issues to technical reviewers.
• Oversee Associates and Senior Associates, schedule and manage their workloads, review their work, provide performance feedback and learning, and act as a Career Advisor.
• Perform other duties as required.
• Travel as necessary.

Benefits

• ESOP beneficial ownership and participation in the firm’s success.
• Comprehensive compensation and Total Rewards benefits offerings; benefits may be subject to eligibility requirements.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager