Senior Associate, SOC

About Schellman

Schellman is a Top 50 CPA firm and a leading provider of attestation and compliance services. We focus on security and privacy audits, assessments, and certifications. We are an accredited multi‑framework ISO Certification Body for security, privacy, business continuity, and quality; a globally licensed PCI Qualified Security Assessor and a top provider to clients serving the federal DoD space as a leading FedRAMP 3

PAO and the first assessment firm authorized as a CMMC C3

PAO. We specialize in best‑in‑class Cybersecurity and IT Audits and Attestations. We are recognized as a Great Places to Work certified company and a Best Firm to Work For by Accounting Today and Glassdoor. Our core value “People Come First” drives our culture, benefits, and client interactions.

Senior associates are primarily responsible for hands‑on project execution. Experienced senior associates have, or are working towards, specialization in one or more service lines and are assigned to projects accordingly. They are supervised by a service delivery principal responsible for their career development and by project management teams. In some occasions senior associates may supervise junior associates or other senior associates when serving as a member of a project management team.

The role offers exposure to a variety of SOC examinations and attestations across network, application, or cloud environments, enabling continuous learning and professional growth.

• Demonstrate proficiency in Schellman Methodology.
• Guide associates and peers through information sharing, support, and thought leadership.
• Earn Schellman‑approved certifications: CCSK (minimum requirement for SD), ISO Lead Auditor, and one of: CCSP, CISA, CISSP, AWS CCP, etc.; ISO Lead Auditor within the second year.
• Run a project from fieldwork through completion, including testing, work‑paper documentation, testing exception documentation, draft report creation, and management representation letter preparation.
• Understand and speak to Schellman’s service lines at a high level and their leaders.
• Demonstrate proficiency in SOC 1 ITGCs and each SOC 2 criterion (Security, Availability, Processing Integrity, Confidentiality, Privacy).
• Understand Principal Service Commitments and System Requirements (PSCRs) and how they impact scope of a SOC 2.
• Derive PSCRs through client documentation and interviews.
• Know all four report opinion outcomes and draft modified opinions.
• Identify if exceptions would yield a qualified opinion.
• Self‑organize, plan for future projects, and prepare accordingly.
• Accurately manage and report time worked to each project or initiative.
• Define a clear communication strategy with the project manager to discuss testing delays, disclosures, etc., in a timely manner.
• Perform senior‑associate level responsibilities (listed in the last section).

• Comply with Schellman’s code of ethics, methodologies, policies, and procedures.
• Adhere to professional and regulatory standards relevant to assigned service lines.
• Promote Schellman’s culture and exemplify core values.
• Establish high‑quality relationships and rapport with client personnel.
• Manage client expectations to exceed them.
• Complete assigned duties in a timely manner with high attention to detail.
• Collaborate productively with fellow project team members throughout the life cycle of each project.
• Adhere to project schedules and keep team members apprised of progress.
• Escalate issues internally in a proper and timely manner.
• Use discretion and decorum in client communications.
• Book travel reservations promptly in accordance with travel and expense policies.
• Perform essential functions of other service delivery positions when qualified and called upon.
• Attend project kick‑off and closing meetings.
• Execute testing procedures, perform detailed analysis, document results, and suggest improvement ideas.
• Draft project deliverables.
• Serve as a contact for clients’ basic engagement questions.
• Participate in recruiting and candidate interview activities.
• Train project team members.
• Acculturate newer team members to Schellman.
• Contribute to Schellman’s practice development efforts.
• Develop…