Assurance Experienced Manager, Third Party Attestation

Job Summary

The Assurance Experienced Manager, Third Party Attestation is responsible for leading a team of audit professionals in the planning, fieldwork, and wrap‑up phases of third‑party attestation reports. This role focuses on various types of reports including System and Organization Controls (SOC) 1, SOC 2, SOC 3, SOC for Cybersecurity, Web Trust for CAs, HITRUST, SSPA, ISO, MRC, and CSA STAR. The manager ensures compliance with relevant governing standards and regulations while documenting, validating, testing, and assessing control systems, including internal controls.

The team specializes in these specific areas of third‑party attestation reports to understand the entire technology risk umbrella rather than maintaining overall knowledge in Information Technology General Control (ITGC) audit or IT audit.

• Control Environment
  • Apply knowledge and understanding of governing principles and document how they are applied in engagements.
  • Identify and consider all applicable policies, laws, rules, and regulations of the firm, regulators, or other authoritative bodies as part of the engagement team.
  • Apply a broad understanding of objectives and components of the overall control environment, organization and supervisory controls.
  • Oversee planning and execution of attestation examinations, including obtaining an understanding of the control environment, designing test plans, evaluating deficiencies, and assessing the overall control environment.
  • Identify and prioritize key risks and assess their impact and likelihood of occurrence.
  • Oversee documenting and validating the operating effectiveness of the client’s internal control system.
  • Oversee documenting business and IT processes and controls and test key controls for service organizations in a variety of industries.
  • Review client attestation reports, ensuring accuracy, completeness, and that all supporting information is documented in the work papers through appropriate testing.
  • Identify, analyze and discuss alternative principles with engagement leadership and the client, as needed.
• Engagement Management
  • Serve as primary client contact for all questions and issues.
  • Develop and maintain relationships with client personnel and management.
  • Supervise the work of the engagement team and review work papers and conclusions, preferably onsite, during fieldwork.
  • Identify and delegate functions of the engagement to the auditor in charge, as deemed appropriate.
  • Provide on‑the‑job training to less experienced team members.
  • Identify complex issues and bring them to a resolution with client and leadership.
  • Communicate suggestions to improve client internal controls and procedures to management and/or audit committee.
  • Draft attestation reports and effectively communicate contents to client.
  • Recognize and apply new pronouncements to client situations.
  • Ensure technology is appropriately integrated into the examination process.
• Methodology
  • Apply BDO standards to guide effective and efficient delivery of quality services.
  • Ensure completion of all appropriate documentation in BDO work papers.
  • Conduct a detailed review to assure the audit is completed in accordance with assurance manual standards.
  • Prepare and/or review required communications to management and audit committees, ensuring timeliness and completeness.
  • Recommend appropriate outcomes to critical issues.
  • Initiate and prepare client acceptance/retention procedures, where appropriate.
  • Plan the audit process and oversee execution of procedures with quality, efficiency, and completeness despite deadlines.
  • Execute proper BDO methodology, including proper archiving procedures.
  • Ensure all work is performed in accordance with BDO methodology and requirements.
• Research
  • Use methodology to seek or maintain information from authoritative sources and draw conclusions regarding target issues.
  • Research complex topics and form an opinion on the treatment independently.
  • Apply comprehensive knowledge of all appropriate research tools and draw conclusions based on appropriate research.
  • Prepare memos supporting research and conclusions, and consult with others, if appropriate.
  • Present issues to technical reviewers effectively and accurately.
• Sup…