Assurance Senior Manager, Third Party Attestation

Job Summary

The Assurance Senior Manager, Third Party Attestation is reserved for professionals who have achieved recognition in a specific technical area of third-party attestation reporting. This includes expertise in System and Organization Controls (SOC) 1, SOC 2, SOC 3, SOC for Cybersecurity, Web Trust for CAs, HITRUST, SSPA, ISO, MRC, and CSA STAR. The role actively participates in marketing, networking, and business development within an area of expertise while maintaining client relationships and acting as the primary contact for complex questions and important technical areas impacting engagements.

Control Environment

• Apply advanced knowledge to understand the collective effect of various factors on establishing or enhancing effectiveness and mitigating risks of specific policies and procedures.
• Identify and consider all applicable policies, laws, rules, and regulations of the firm, regulators, or other authoritative bodies as part of the engagement team.
• Make constructive suggestions to improve client internal controls.
• Ensure proper documentation of the client’s internal control system and business/IT processes, and test key controls in a variety of industries.
• Supervise audit team work, review work papers and conclusions preferably onsite during audit field work.
• Identify and delegate functions of the audit to the auditor in charge as deemed appropriate.
• Provide on‑the‑job training to the engagement team during field work.
• Prioritise key risks and assess their impact and likelihood of occurrence.
• Communicate to client areas to improve processes, strengthen controls, mitigate risks, and/or increase efficiency.
• Develop and maintain relationships with client personnel and management.
• Ensure technology is appropriately integrated into the examination process.
• Apply advanced knowledge of MRC’s Minimum Standards and other relevant industry criteria (e.g., IAB, POCMA, TAG) and incorporate them into risk assessment and control evaluation.

GAAS

• Apply advanced knowledge and understanding of professional standards and document and communicate an understanding of professional standards on an engagement.
• Develop and apply advanced knowledge of auditing theory, audit skepticism, and use of BDO audit manuals.
• Apply auditing theory to various client situations.
• Identify complex issues, including deviations, and form a resolution, seeking counsel of BDO technical experts as needed.
• Determine where testing may be reduced or expanded and provide counsel to audit team members.
• Apply advanced knowledge of AT‑C 105/205 tailored to non‑financial metrics and counsel on audit team.

Other (Attestation Examinations)

• Plan and execute attestation examinations, including control environment understanding, test plan design, deficiency evaluation, and overall financial reporting control assessment.
• Plan and execute readiness assessments and roadmaps, including gap analyses against relevant criteria.
• Review clients’ reports, ensuring accuracy and completeness, and document supporting information and testing in work papers.
• Prepare required communications to the client and Audit Committee as applicable.
• Recognise and apply new pronouncements to client situations.
• Identify, analyse, and discuss alternative principles with Manager, Senior Manager, engagement partner, and client as needed.
• Identify complex issues and bring them to superiors for resolution.
• Coach less experienced team members in new areas.

Methodology

• Conduct detailed reviews to assure audits are completed according to assurance manual standards.
• Prepare or review communications to management and audit committees, ensuring timeliness and completeness.
• Recommend appropriate outcomes for critical issues.
• Initiate and prepare client acceptance/retention procedures…