JOB DETAIL

Job Information

Job Code:

AUD615

Level:

06

Job Title:

SOC Audit Manager

Reports to Position:

SOC Audit Partner

Department (Name / ID):

SOC (17)

Job Summary

BDO’s Core Purpose is Helping People Thrive Every Day. Our Core Values reflect how we manage our work, our relationships and ourselves. As an employee of the firm, you will live true to our Core Values of people first, being exceptional every day in every way, embracing change, feeling empowered through knowledge and choosing accountability. Our Core Values are the standards by which we conduct ourselves day in and day out, both internally and externally.

The SOC Audit Manager is responsible for leading a team of audit professionals performing the duties of planning, fieldwork and wrap-up for the preparation of third party attestation reports, including Service Organization Control (SOC) 1, SOC 2, and WebTrust for CAs, as well as HITRUST, and ISO, while applying all areas of the governing standard, as necessary, for documenting, validating, testing and assessing various control systems. This position is also involved in other business process or IS assurance related engagements, including Sarbanes-Oxley (SOX), Information Technology (IT) general control testing for private company financial audit engagements and agreed-upon procedure engagements, as needed.

Job Duties

Control Environment:

• Applies knowledge and understanding of governing principles, applying these principles to clients and documenting and communicating an understanding and application of these principles by:
  • Identifying and considering all applicable policies, laws, rules, and regulations of the firm, regulators, or other authoritative bodies as part of engagement team
  • Applying a broad understanding of objectives and components of the overall control environment, organization and supervisory controls
  • Overseeing planning and executing attestation examinations, including obtaining an understanding of the control environment, designing test plans, evaluating deficiencies and assessing the overall control environment
  • Identifying and prioritizing key risks, and assesses their impact and likeliness of occurrence
  • Overseeing the documenting and validating of the operating effectiveness of the clients’ internal control system
  • Overseeing the documenting of business and IT processes and controls and tests key controls for service organizations in a variety of industries
  • Reviewing client attestation reports, ensuring accuracy, completeness and all supporting information is documented in the work papers and through appropriate testing
  • Identifying, analyzing and discussing alternative principles with engagement leadership and client, as needed

GAAS

• Applies knowledge and understanding of professional standards, application of the principles contained in professional standards and the ability to document and communicate an understanding and application of professional standards on an engagement by:
  • Developing and applying an advanced knowledge of auditing theory, a sense of audit skepticism and the use of BDO audit manuals in performing and supervising work
  • Applying auditing theory to various client situations
  • Documenting workpapers and attestation reports in line with BDO policy, identifying deviations and notifying the engagement partner in order to obtain appropriate approvals
  • Applying knowledge to identify instances where testing may be reduced or expanded, and notifying the engagement partner of the occurrence
  • Contributing ideas and opinions to the engagement team

Engagement Management

• Serves as primary client contact for all questions and issues
• Develops and maintains relationships with client personnel and management
• Supervises the work of the engagement team, and reviews workpapers and conclusions, preferably onsite, during fieldwork
• Identifies and delegates functions of the engagement to the auditor in charge, as deemed appropriate
• Provides on the job training to less experienced team members
• Identifies complex issues, and brings them to a resolution with client and leadership
• Identifies and communicates suggestions to improve client internal controls and procedures to management and/or audit committee
• Drafts attestation reports, and effectively communicates contents to client
• Recognizes and applies new pronouncements to client situations
• Ensures technology is appropriately integrated into the examination process

Methodology

• Applies knowledge and application of BDO standards to guide effective and efficient delivery of quality services and products by:
  • Ensuring completion of all appropriate documentation in BDO workpapers
  • Conducting a detailed review to assure audit is completed in accordance with assurance manual standards
  • Preparing and/or reviewing required communications to management and audit committees, ensuring timeliness and completeness
  • Recommending appropriate outcomes to critical issues
  • Initiating and preparing client acceptance/retention procedures, where appropriate
  • Planning the audit process, and overseeing the execution of procedures with quality, efficiency and completeness despite pressures of deadlines
  • Executing proper BDO methodology, including but not limited to proper archiving procedures
  • Ensuring all work is performed in accordance with BDO methodology and requirements

Research

• Applies methodology used to seek or maintain information from authoritative sources and to draw conclusions regarding a target issue based on the information by:
  • Researching complex topics and forming an opinion on the treatment independently
  • Applying a comprehensive knowledge of all appropriate research tools, and drawing conclusions based upon appropriate research
  • Preparing memos supporting research and conclusions, and consulting with others, if appropriate
  • Presenting issues to technical reviewers effectively and accurately

Other duties as required

Supervisory Responsibilities

• Oversees supervision of Associates and Senior Associates on all projects
• Schedules and manages the workload of Associates and Senior Associates
• Reviews work prepared by Associates and Senior Associates, and provides review comments
• Provides verbal and written performance feedback to Associates and Senior Associates
• Provides on the job learning to Associates and Senior Associates
• Acts as a Career Advisor to Associates and Senior Associates

Qualifications, Knowledge, Skills and Abilities

Education

• Bachelor’s degree in Accounting, Computer Science, Management Information Systems, Business Administration, Finance or Economics required
• Master’s degree in Accounting and minor or dual major in Information Systems or other relevant advanced degree, preferred

Experience

• More than five (5) years of prior experience in IT, internal or external audit, required
• Supervisory experience, required
• Experience performing SOC, WebTrust, HITRUST, SOX, ISO 27001 and security/privacy advisory engagements, preferred

     License/Certifications

• CPA, CISA, CISSP, CISM, C|EH, CRISC or CGEIT required

Software

• Proficient in the use of Microsoft Office Suite, specifically Word, Excel and PowerPoint preferred
• Prior experience with various applications (e.g., ERP systems), operating systems (e.g., UNIX, Windows); and databases (e.g., Oracle, SQL) preferred
• Exposure to cloud platforms, SaaS applications, security and engineering tools, and other industry software preferred

    Language

• N/A

Other Knowledge, Skills & Abilities

• Excellent understanding and experience planning and coordinating the stages to perform technology-focused audits and assessments
• Strong knowledge of internal controls and professional standards and regulations (SOC, ISO, WebTrust, HITRUST, Sarbanes-Oxley, etc)
• Knowledge of data analytics and emerging technologies, preferred
• Strong analytical and diagnostic skills with the ability to break down complex issues and implement appropriate resolutions
• Ability to successfully multi-task while working independently and within a group environment
• Ability to work in a demanding, deadline driven environment with a focus on details and accuracy
• Strong project management skills with the ability to manage multiple projects simultaneously
• Capable of effectively managing a team of professionals and delegating work assignments
• Ability to encourage a team environment on engagements, and contribute to the professional development of assigned personnel
• Capacity to build and maintain strong relationships with client personnel
• Executive presence and ability to act as primary contact on assigned engagements
• Strong verbal and written communication skills with the ability to adapt style and messaging to effectively communicate with professionals at all levels both within the client organization and the firm
• Ability and willingness to travel up to 40%, required