Assistant Manager - SOC Reporting

Grant Thornton UK LLP; City Of London; Hybride; GBP 65 000 - 90 000; Plein temps

Avantages offerts par ce poste

Flexible working options

Résumé du poste

Grant Thornton UK LLP's Specialist Assurance team seeks an Assistant Manager to lead SOC 1, SOC 2, ISAE 3402 engagements from planning through to completion, including walkthroughs, testing and reporting.

You will assess ITGCs, information security controls and cloud/outsourced environments, manage client relationships and coach junior staff. We support flexible working and balanced life, offering development opportunities and exposure to some of the UK's most innovative organisations.

Qualifications

• 4+ years in IT audit, technology risk, controls assurance or SOC reporting.

Responsabilités

• As Assistant Manager, lead SOC 1/2, ISAE 3402 engagements from planning to completion.

Connaissances

SOC engagements

IT audit

Stakeholder management

Project management

Report writing

Cloud security

Communication

Leadership/mentoring

Formation

ACA/ACCA/CISA/CIA/CRISC/CISSP

Outils

ISO 27001

NIST CSF

COBIT

Description du poste

Alternatively, Grant Thornton At Grant Thornton we do things differently - looking to the future, driving ambitious growth and pioneering positive change in our industry. Providing audit, tax and advisory services, we empower clients through strategic insight, curiosity, and genuine partnership. And we empower our people with real opportunity, an inclusive culture and work life balance. A true alternative. With over 5,000 people in the UK, and a presence in 150 global markets, we're on an ambitious journey, from great to exceptional, and we need the best people to help us achieve our potential. And with that comes the opportunity to help redefine what our industry looks like, and what you want from your career.

Job Description: Assistant Manager - SOC 1, SOC 2 & ISAE 3402

MORE THAN YOU EXPECTED Grant Thornton UK LLP is part of a global network of independent audit, tax and advisory firms, made up of some 58,000 people in over 135 countries. We’re a team of independent thinkers who put quality, inclusion and integrity first. All around the world we bring a different experience to our clients. A better experience. One that delivers the expertise they need in a way that goes beyond. Personal, proactive, and agile. That’s Grant Thornton.

BUILDING TRUST THROUGH ASSURANCE

Every day our teams help people in businesses and communities to do what is right and achieve their goals. As part of Grant Thornton's Specialist Assurance team, our System and Organisation Controls (SOC) practice helps organisations build trust with customers, regulators and stakeholders through independent assurance reporting. We work with a wide range of organisations across technology, financial services, fintech, outsourcing, SaaS, cloud and business process service providers, delivering SOC 1, SOC 2, AAF 01/20 and ISAE 3402 engagements. We're looking for an Assistant Manager with a strong IT controls background who is interested in understanding how technology, security, operations and governance come together to support effective control environments. This role offers significant client exposure, opportunities to develop as a trusted advisor, and the chance to work with some of the UK's most innovative organisations. We're happy to talk flexible working and consider reduced hours and job shares. We'll support you to balance your work and life.

A look into the role

As an Assistant Manager within our System and Organisation Controls (SOC) team, you will play a key role in the delivery of assurance engagements, helping service organisations demonstrate the effectiveness of their control environments to customers and stakeholders.

You will:

• Deliver SOC 1, SOC 2, AAF 01/20 and ISAE 3402 assurance engagements from planning through to completion.
• Lead fieldwork, including walkthroughs, control testing, evidence evaluation and reporting.
• Assess the design and operating effectiveness of IT general controls, information security controls and automated business controls.
• Evaluate technology risk areas including logical access, change management, IT operations, cybersecurity, cloud environments and third-party risk management.
• Manage client relationships and act as a day-to-day point of contact throughout engagements.
• Review the work of Associates and Senior Associates, providing coaching and support to aid their development.
• Support engagement planning, budgeting, resourcing and delivery against agreed timelines.
• Work closely with clients to understand their services, systems and control environments, identifying opportunities to strengthen governance and controls.
• Contribute to business development activities, proposals, methodology enhancement and the continued growth of the practice.
• Build strong internal relationships across Technology Risk, Financial Services and Audit teams.

Knowing you're right for us

You’ll need:

• 4+ years' experience in IT audit, technology risk, controls assurance, SOC reporting, external audit or internal audit.
• Experience delivering or supporting SOC 1, SOC 2, ISAE 3402 or AAF 01/20 engagements.
• Strong understanding of IT General Controls (ITGCs), including user access management, privileged access management, change management, IT operations, backup and recovery, and incident management.
• Experience evaluating control design and operating effectiveness.
• Understanding of information security and technology control environments, including cloud-hosted services and outsourced service providers.
• Experience managing client relationships and leading meetings with senior stakeholders.
• Strong project management skills with the ability to manage multiple engagements and deadlines.
• Experience reviewing the work of junior team members and providing coaching and developmental feedback.
• Excellent written communication skills, including report writing and explaining technical concepts to non-technical audiences.
• A strong commercial mindset and the ability to identify opportunities to add value for clients.

Desirable experience

• Experience working with SaaS providers, cloud service providers, fintechs, fund administrators or other outsourced service organisations.
• Understanding of complementary user entity controls (CUECs), subservice organisations and carve-out or inclusive reporting approaches.
• Experience participating in business development activities, proposals or client presentations.
• Knowledge of ISO 27001, NIST Cybersecurity Framework or COBIT.
• Relevant professional qualifications such as ACA, ACCA, CISA, CIA, CRISC or CISSP.

Knowing we're right for you

Embracing uniqueness, the culture at Grant Thornton thrives on the contributions of all our people. We never settle for what is easy; we look beyond to deliver the right thing for everyone. Building an inclusive culture where we value difference and respect our colleagues helps our people perform at their best and realise their potential. Our open and accessible culture means you'll interact with leaders who are interested in you and everything you bring to our firm. The things that set you apart, we value them. That's why we give you the freedom to bring your whole self to work and pursue your passions inside and outside of work.

Beyond the job

Life is more than work. The things you do, and the people you’re with outside of work matter, that’s why we’re happy to look at flexible working options for all our roles, and we’ll always do our best to keep your work and life in balance. The impact you can make here will go far beyond your day job. From secondments, to fundraising for local charities, or investing in entrepreneurs in the developing world, you’ll be giving back to society. It’s that drive to do the right thing that runs through our every move, grounded in our CLEARR values: Collaboration, Leadership, Excellence, Agility, Respect and Responsibility. We’re looking for people who want to contribute, spark fresh ideas and go beyond expectations. People who want to be able to proudly do what’s right, for the firm, our clients, our people and themselves. It’s how it should be. #LI-SS1

The things you do, and the people you're with outside of work matter, that's why we're happy to look at flexible working options for all our roles, and we'll always do our best to keep your work and life in balance. Whether that's working reduced contracted hours, working your hours over a shorter period or utilising our 'how we work' framework. Everyone has an immediate right to request a flexible arrangement through our flexible working policy. Read more about our approach to flexible working.