Assurance Experienced Manager, Third Party Attestation

Job Summary:

The Assurance Experienced Manager, Third Party Attestation is responsible for leading a team of audit professionals in the planning, fieldwork, and wrap-up phases of third-party attestation reports. This role focuses on various types of reports, including System and Organization Controls (SOC) 1, SOC 2, SOC 3, SOC for Cybersecurity, WebTrust for CAs, HITRUST, SSPA, ISO, MRC, and CSA STAR. The Experienced Assurance Manager ensures compliance with the relevant governing standards and regulations while documenting, validating, testing, and assessing control systems, including internal controls. The team specializes in these specific areas of third-party attestation reports to understand the entire technology risk umbrella rather than maintaining overall knowledge in Information Technology General Control (ITGC) audit or IT audit.

Job Duties:

Control Environment:

• Applies knowledge and understanding of governing principles, applying these principles to clients and documenting and communicating an understanding and application of these principles by:
  • Identifying and considering all applicable policies, laws, rules, and regulations of the firm, regulators, or other authoritative bodies as part of engagement team
  • Applying a broad understanding of objectives and components of the overall control environment, organization and supervisory controls
  • Overseeing planning and executing attestation examinations, including obtaining an understanding of the control environment, designing test plans, evaluating deficiencies and assessing the overall control environment
  • Identifying and prioritizing key risks, and assesses their impact and likeliness of occurrence
  • Overseeing the documenting and validating of the operating effectiveness of the clients’ internal control system
  • Overseeing the documenting of business and IT processes and controls and tests key controls for service organizations in a variety of industries
  • Reviewing client attestation reports, ensuring accuracy, completeness and all supporting information is documented in the work papers and through appropriate testing
  • Identifying, analyzing and discussing alternative principles with engagement leadership and client, as needed

GAAS:

• Applies knowledge and understanding of professional standards, application of the principles contained in professional standards and the ability to document and communicate an understanding and application of professional standards on an engagement by:
  • Developing and applying an advanced knowledge of auditing theory, a sense of audit skepticism and the use of BDO audit manuals in performing and supervising work
  • Applying auditing theory to various client situations
  • Documenting workpapers and attestation reports in line with BDO policy, identifying deviations and notifying the engagement partner in order to obtain appropriate approvals
  • Applying knowledge to identify instances where testing may be reduced or expanded, and notifying the engagement partner of the occurrence 
  • Contributing ideas and opinions to the engagement team

Engagement Management:

• Serves as primary client contact for all questions and issues
• Develops and maintains relationships with client personnel and management
• Supervises the work of the engagement team, and reviews workpapers and conclusions, preferably onsite, during fieldwork
• Identifies and delegates functions of the engagement to the auditor in charge, as deemed appropriate
• Provides on the job training to less experienced team members
• Identifies complex issues, and brings them to a resolution with client and leadership 
• Identifies and communicates suggestions to improve client internal controls and procedures to management and/or audit committee
• Drafts attestation reports, and effectively communicates contents to client
• Recognizes and applies new pronouncements to client situations
• Ensures technology is appropriately integrated into the examination process

Methodology:

• Applies knowledge and application of BDO standards to guide effective and efficient delivery of quality services and products by:
  • Ensuring completion of