SOC & IT Senior Auditor, Third Party Attestation

BDO • San Francisco, CA

274d • $85,000 - $125,000

About The Position

The Assurance Senior, Third Party Attestation will be responsible for the preparation of third-party attestation reports, including System and Organization Controls (SOC) 1, SOC 2, SOC 3, SOC for Cybersecurity and WebTrust for CAs, as well as HITRUST, SSPA, ISO, MRC and CSA STAR applying most areas of the governing standard as necessary and documenting, validating, testing, and assessing various control systems, including internal controls. Our TPA individuals specialize in these specific areas to understand the entire technology risk umbrella rather than maintaining overall knowledge in Information Technology General Control (ITGC) audit or IT audit.

Requirements

• Bachelor's degree in Accounting, Computer Science, Management Information Systems, Business Administration, Managerial Marketing and Entrepreneurship, Finance or Economics, required.
• More than two (2) years of prior experience in IT, internal or external audit, required.
• Proficiency in Microsoft Office Suite, specifically Word, Excel, and PowerPoint, required.

Nice To Haves

• Master's degree in Accounting and minor or dual major in Information Systems or other relevant advanced degree, preferred.
• More than one (1) year of prior supervisory experience, preferred.
• Experience performing internal control reviews, preferred.
• Experience performing SOC, WebTrust, HITRUST, SOX, ISO 27001 and security/privacy advisory engagements, preferred.
• One or more of the following certifications are preferred: CPA, CISA, CISSP, ISO 27001 Lead Auditor certification, HITRUST CCSFP, CIA, CISM, C | EH, CRISC, CGEIT.
• Prior experience with various applications (e.g., ERP systems), operating systems (e.g., UNIX, Windows); and databases (e.g., Oracle, SQL), preferred.
• Exposure to cloud platforms, SaaS applications, security and engineering tools, and other industry software, preferred.

Responsibilities

• Identifying and considering all applicable policies, laws, rules, and regulations of the firm, regulators, or other authoritative bodies as part of engagement team.
• Making constructive suggestions to improve client internal controls and accounting procedures.
• Documenting and validating the operating effectiveness of the clients' internal control system.
• Supervising and reviewing the work of staff.
• Documenting business and IT processes and controls and tests key controls for service organizations in a variety of industries.
• Identifying and prioritizing key risks and assesses their impact and likeliness of occurrence.
• Communicating to the client areas to improve processes, strengthen controls, mitigate risks, and/or increase efficiency.
• Developing and maintaining relationships with client personnel and management.
• Ensuring technology is appropriately integrated into the examination process.
• Planning and executing attestation examinations including obtaining an understanding of the control environment, designing test plans, evaluating deficiencies and assessing the overall financial reporting control environment.
• Reading and reviewing clients' reports, ensuring accuracy and completeness, and also ensuring that all supporting information is documented in the workpapers and through appropriate testing.
• Preparing required communications to the Client and the Audit Committee, as applicable.
• Recognizing and applying new pronouncements to client situations.
• Identifying complex issues and brings them to the attention of superiors for resolution.
• Coaching less experienced team members in new areas.

Benefits

• Employee Stock Ownership Plan (ESOP) providing a stake in the firm's success.
• Comprehensive compensation and Total Rewards benefits offerings.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Professional, Scientific, and Technical Services
• Education Level: Bachelor's degree