Assurance Senior, Technology Risk Assurance

BDO USA•Chicago, IL

About The Position

The Assurance Senior, Technology Risk Assurance assists in planning IT audit engagements and executes IT risk assessments and control evaluations to determine how controls affect financial audit procedures. The role designs and performs procedures to understand and test clients’ IT environments and related IT general controls, including logical access, change management, and IT operations. It also involves testing business process controls, key reports, and information produced by the entity (IPE) across various client industries. The Assurance Senior applies auditing standards and BDO methodology, documents and evaluates control testing results, identifies deficiencies and complex issues, and communicates opportunities to improve processes, strengthen controls, mitigate risks, or increase efficiency. The role builds and maintains client relationships and provides training, mentoring, and technical guidance to associate team members. The position includes supervisory duties such as setting deadlines, tracking engagement status, schedule, and budget, reviewing associates’ work, providing feedback, and coaching team members. Travel of up to 30% may be required.

Requirements

Bachelor’s degree in Accounting, Computer Science, or Information Systems.
More than two years of IT audit and/or related risk and controls experience.
More than one year of supervisory experience.
Proficiency with PCAOB and AICPA audit standards.
Proficiency in Microsoft Office Suite.
Excellent verbal and written communication skills.
Strong analytical and basic research skills.
Solid organizational skills, attention to detail, and ability to meet project deadlines.
Ability to multitask while working independently or in a group environment.
Ability to work in a deadline-driven environment and handle multiple projects simultaneously.
Ability to build and maintain strong relationships with client personnel.
Ability to encourage teamwork and contribute to the professional development of assigned personnel.
Ability to interact successfully with professionals at all levels.
Advanced knowledge of internal controls.
Ability to travel up to 30%.

Nice To Haves

Master’s degree in Information Systems or another relevant advanced degree.
Public accounting experience.
Experience performing audit tests of design, implementation, and operating effectiveness procedures for public companies.
Experience reviewing and testing third-party attestation (SOC) reports.
CPA, CISA, CISM, CRISC, CGEIT, CISSP, and/or CFE certification.
Exposure to various industry ERP applications.

Responsibilities

Assist with planning IT audit engagements and execute IT risk assessments and control evaluations.
Understand and document client IT environments and the impact of IT on audit risks.
Identify controls that mitigate IT-related risks in the client environment.
Obtain and document an understanding of client control environments; design, conduct, and document tests of controls.
Design and execute procedures to assess IT general controls, including logical access, change management, and IT operational controls.
Test business process controls, key reports, and information produced by the entity (IPE).
Document procedure results and deficiencies, and assess their impact on the financial reporting control environment.
Review client information and control documentation for accuracy and completeness, and ensure supporting evidence and testing are documented in workpapers.
Identify complex issues and bring them to the attention of the team and management for resolution.
Communicate opportunities to improve processes, strengthen controls, mitigate risks, and increase efficiency.
Apply auditing standards, BDO methodology, industry guidance, and relevant professional standards to client situations.
Identify when testing may be reduced or expanded and advise audit team members.
Prepare and communicate procedure results to clients.
Build and maintain relationships with client personnel and management, and act as the primary contact on assigned engagements.
Set deadlines and oversee procedures to meet them; track engagement status, schedule, and budget for reporting to the team and client.
Review associate staff work, provide feedback, and detail-review procedures performed.
Teach, coach, and provide on-the-job learning to associate team members.
Support teamwork by assisting others and delivering on commitments to team members and clients.
Build knowledge of methodology, relevant standards, and regulations.