Assurance Senior, Third Party Attestation

Assurance Senior, Third Party Attestation

and 1 more

Job Summary:

The Assurance Senior, Third Party Attestation is responsible for the preparation of third-party attestation reports, including System and Organization Controls (SOC) 1, SOC 2, SOC 3, SOC for Cybersecurity and Web Trust for CAs, as well as HITRUST, SSPA, ISO, MRC and CSA STAR applying most areas of the governing standard as necessary and documenting, validating, testing, and assessing various control systems, including internal controls.

TPA individuals specialize in the specific areas to understand the entire technology risk umbrella rather thanmaintaining overall knowledge in Information Technology General Control  (ITGC) audit or IT audit.

Job Duties:

• Applies knowledge and understanding of the collective effect of various factors on establishing or enhancing effectiveness, or mitigating the risks, of specific policies and procedures by:
  • Identifying and considering all applicable policies, laws, rules, and regulations of the firm, regulators, or other authoritative bodies as part of engagement team
  • Making constructive suggestions to improve client internal controls and accounting procedures
  • Documenting and validating the operating effectiveness of the clients’ internal control system
  • Supervising and reviewing the work of staff
  • Documenting business and IT processes and controls and tests key controls for service organizations in a variety of industries
  • Identifying and prioritizing key risks and assesses their impact and likeliness of occurrence.
  • Communicating to the client areas to improve processes, strengthen controls, mitigate risks, and/or increase efficiency
  • Developing and maintaining relationships with client personnel and management; and
  • Ensuring technology is appropriately integrated into the examination process

GAAS:

• Applies knowledge and understanding of professional standards; application of the principles contained in professional standards; and the ability to document and communicate an understanding and application of professional standards on an engagement by:
  • Developing and applying an intermediate knowledge of auditing theory, a sense of audit skepticism, and the use of BDO audit manuals
  • Applying auditing theory to various client situations
  • Documenting working papers and attestation reports in line with BDO policy, identifying deviations and notifying more senior team members in order to obtain appropriate approvals
  • Applying knowledge to identify instances where testing may be reduced or expanded and notifying more senior team members of the occurrence; and
  • Contributing ideas and opinions to the engagement team

Other:

• Applies knowledge and understanding of governing principles; applying these principles to client transactions; and documenting and communicating an understanding and application of these principles by:
  • Planning and executing attestation examinations including obtaining an understanding of the control environment, designing test plans, evaluating deficiencies and assessing the overall financial reporting control environment
  • Reading and reviewing clients’ reports, ensuring accuracy and completeness, and also ensuring that all supporting information is documented in the work papers and through appropriate testing
  • Preparing required communications to the Client and the Audit Committee, as applicable
  • Recognizing and applying new pronouncements to client situations
  • Identifying, analyzing and discussing alternative principles with the Manager, Senior Manager and engagement partner and the client, as needed
  • Identifying complex issues and brings them to the attention of superiors for resolution
  • Coaching less experienced team members in new areas

Methodology

• Applies knowledge and application of BDO standards to guide effective and efficient delivery of quality services and products by:
  • Completing all appropriate documentation of BDO work papers; and
  • Ensuring assigned work is performed in accordance with BDO methodology and requirements

Research:

• Applies methodology used to seek or maintain information from authoritative sources and to draw conclusions regarding a target issue based on the information by:
  • Researching basic and…