IT Audit Manager, IS Assurance

Job Summary:

The Assurance Manager, IS Assurance is responsible for leading teams in planning and performing IT risk and control work for a wide range of complex environments. In this role, the Assurance Manager, IS Assurance will be charged with designing the scope of procedures and ensuring the appropriate execution of those procedures by the team, including the review, documentation, testing, and evaluation of information technology processes, often on multiple engagements.

Job Duties:

Business Acumen:

• Applies knowledge of business functions, processes, and strategies to provide services, solutions, and advice that considers and improves the organization as evidenced by:
  • Understanding core business operations/structure of various businesses
  • Demonstrating knowledge of business issues, trends, and industry economics
  • Demonstrating ease with client communications

Risk and Controls Focus:

• Applies knowledge and understanding of the collective effect of various factors on establishing or enhancing effectiveness, or mitigating the risks, of specific policies and procedures by:
  • Identifying and considering applicable policies, laws, rules, and regulations of the firm, regulators, or other authoritative bodies
  • Liaising with other professionals (such as core assurance) and the client to establish scope and strategy of work to be performed, and continuing team communications to work through complex issues and conclusions
  • Ensuring proper documentation of the clients’ business and IT processes and controls and testing key controls in a variety of industries
  • Reviewing workpapers and conclusions during audit field work
  • Providing on-the-job-training to the engagement team during field work
  • Communicating to the client areas to improve processes, strengthen controls, mitigate risks, and/or increase efficiency
  • Developing and maintaining relationships with client personnel and management
  • Identifying and making constructive suggestions to improve client internal controls and accounting procedures

Professional Competence:

• Applies knowledge and understanding of professional standards; application of the principles contained in professional standards; and the ability to document and communicate an understanding and application of professional standards on an engagement by:
  • Applying knowledge of auditing theory, a sense of professional skepticism, and the use of BDO audit manuals
  • Applying auditing standards and methodology to various client situations
  • Identifying complex issues, including deviations, and working through complex situations collaboratively with the team and client
  • Applying knowledge to identify instances where testing may be reduced or expanded and providing counsel to the members of the audit team.
  • Preparing, reviewing, and communicating results of procedures to the client, ensuring timeliness and completeness

Methodology:

• Applies knowledge and application of BDO standards to guide effective and efficient delivery of quality services and products by:
  • Conducting general and detailed reviews to help ensure audits are completed in accordance with applicable methodology and standards
  • Recommending appropriate outcomes to critical issues
  • Planning the audit process and overseeing the execution of procedures with quality and efficiency, despite pressures of deadlines
  • Executing proper BDO methodology throughout the entirety of the engagement, from engagement acceptance through archive

Other:

• Applies knowledge and understanding of governing principles; applying these principles to client transactions; and documenting and communicating an understanding and application of these principles by:
  • Planning and executing IT audits, including obtaining an understanding of the control environment, designing test plans, evaluating deficiencies, and assessing the overall financial reporting control environment
  • Reading and reviewing clients’ information and control documentation, ensuring accuracy and completeness, and ensuring that all supporting information is documented in the wor