Senior Associate, Information Assurance Services; SOC Focus

Work with a Top 20 CPA and advisory firm that Accounts for Anything.

• Planning and leading client meetings, walk-through reviews of clients control procedures and processes; delivery and presentation of client deliverables.
• Developing and leading the performance of, testing of clients’ security, privacy and other information risk management related controls.
• Directing the execution of testing of clients’ internal controls, testing of clients’ internal controls and review of internal control testing executed by other team members.
• Supporting clients in problem identification and resolution.
• Performing assessments and testing against leading information security and privacy standards and frameworks, including ISO 27001, Trust Services Criteria, PCI DSS, NIST CSF, GDPR, HITRUST and others.
• Leading and supporting preparation of client reporting deliverables; e.g., gap and risk assessments, SOC reporting, GDPR assessments, ISO 27001 certifications, etc.
• One or more industry relevant certifications or wiliness to obtain relevant certification(s) within two years of employment.
• Certifications can include: CISA, CRISC, CIPP, CISSP, CISM, QSA, ISO/IEC 27001, or PCI ISA.
• Undergraduate Degree (required): preferably in MIS/IS or related concentration – minimum 3.3 GPA.
• Graduate Degree (preferred): preferably in MIS, IS or Accounting Information Systems.
• Relevant work experience (2-4 years).
• Strong communication skills; verbal and written, with the ability to produce excellent written reports and audit documentation.
• Commitment to continual learning and development.
• Commitment to exceptional client service and creative problem-solving ability with a consultancy mindset.
• Flexible, self-starter with the ability to interact with various levels of client and firm management.
• Understanding of information technology risks and internal controls.
• Ability to write test procedures and execute tests of controls.
• Understanding of Service Organization Control, PCI, ISO, HITRUST and/or similar information technology control frameworks.
• Ability to travel up to 40%.
• Ability to manage personal schedule and to lead multiple projects, tasks and deadlines.