Assistant Manager - Soc Reporting

Grant Thornton; England; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Flexible working options

Work-life balance

Job summary

Grant Thornton UK LLP, part of a global network of audit, tax and advisory firms, is seeking an Assistant Manager in our Specialist Assurance SOC practice. You will deliver SOC 1/2, ISAE 3402 engagements, lead fieldwork and manage client relationships with senior stakeholders.

You will assess IT general controls, information security and cloud environments, and provide coaching to junior staff while contributing to business development and methodological enhancements.

Qualifications

• 4+ years of experience in IT audit, technology risk, controls assurance, SOC reporting, external audit or internal audit.
• Experience delivering SOC 1, SOC 2, ISAE 3402 or AAF 01/20 engagements.
• Strong understanding of IT General Controls (ITGCs), including user access management, privileged access management, change management, IT operations, backup/recovery, and incident management.
• Experience managing client relationships and leading meetings with senior stakeholders.

Responsibilities

• Deliver SOC 1, SOC 2, AAF 01/20 and ISAE 3402 assurance engagements from planning through to completion.
• Lead fieldwork, including walkthroughs, control testing, evidence evaluation and reporting.
• Assess the design and operating effectiveness of IT general controls and information security controls.
• Evaluate technology risk areas including access, change management, IT operations, cybersecurity and cloud environments.
• Manage client relationships and act as day-to-day contact throughout engagements.
• Review the work of Associates and Senior Associates and provide coaching.
• Support engagement planning, budgeting, resourcing and timely delivery.
• Collaborate with clients to understand services and control environments to strengthen governance.

Skills

IT audit

Technology risk

Controls assurance

SOC reporting

Client relationship management

Project management

Stakeholder management

Report writing

Education

ACA/ACCA/CISA/CIA/CRISC/CISSP

Job description

Job Description

:

Assistant Manager - SOC 1, SOC 2 & ISAE 3402

MORE THAN YOU EXPECTED

Grant Thornton UK LLP is part of a global network of independent audit, tax and advisory firms, made up of some 58,000 people in over 135 countries. We’re a team of independent thinkers who put quality, inclusion and integrity first. All around the world we bring a different experience to our clients. A better experience. One that delivers the expertise they need in a way that goes beyond. Personal, proactive, and agile. That’s Grant Thornton.

BUILDING TRUST THROUGH ASSURANCE

Every day our teams help people in businesses and communities to do what is right and achieve their goals.

As part of Grant Thornton’s Specialist Assurance team, our System and Organisation Controls (SOC) practice helps organisations build trust with customers, regulators and stakeholders through independent assurance reporting. We work with a wide range of organisations across technology, financial services, fintech, outsourcing, SaaS, cloud and business process service providers, delivering SOC 1, SOC 2, AAF 01/20 and ISAE 3402 engagements.

We’re looking for an Assistant Manager with a strong IT controls background who is interested in understanding how technology, security, operations and governance come together to support effective control environments. This role offers significant client exposure, opportunities to develop as a trusted advisor, and the chance to work with some of the UK’s most innovative organisations.

We’re happy to talk flexible working and consider reduced hours and job shares. We’ll support you to balance your work and life.

A look into the role

As an Assistant Manager within our System and Organisation Controls (SOC) team, you will play a key role in the delivery of assurance engagements, helping service organisations demonstrate the effectiveness of their control environments to customers and stakeholders.

You will:

• Deliver SOC 1, SOC 2, AAF 01/20 and ISAE 3402 assurance engagements from planning through to completion.
• Lead fieldwork, including walkthroughs, control testing, evidence evaluation and reporting.
• Assess the design and operating effectiveness of IT general controls, information security controls and automated business controls.
• Evaluate technology risk areas including logical access, change management, IT operations, cybersecurity, cloud environments and third‑party risk management.
• Manage client relationships and act as a day‑to‑day point of contact throughout engagements.
• Review the work of Associates and Senior Associates, providing coaching and support to aid their development.
• Support engagement planning, budgeting, resourcing and delivery against agreed timelines.
• Work closely with clients to understand their services, systems and control environments, identifying opportunities to strengthen governance and controls.
• Contribute to business development activities, proposals, methodology enhancement and the continued growth of the practice.
• Build strong internal relationships across Technology Risk, Financial Services and Audit teams.

Knowing you're right for us

You'll need:

• 4+ years' experience in IT audit, technology risk, controls assurance, SOC reporting, external audit or internal audit.
• Experience delivering or supporting SOC 1, SOC 2, ISAE 3402 or AAF 01/20 engagements.
• Strong understanding of IT General Controls (ITGCs), including user access management, privileged access management, change management, IT operations, backup and recovery, and incident management.
• Experience evaluating control design and operating effectiveness.
• Understanding of information security and technology control environments, including cloud-hosted services and outsourced service providers.
• Experience managing client relationships and leading meetings with senior stakeholders.
• Strong project management skills with the ability to manage multiple engagements and deadlines.
• Experience reviewing the work of junior team members and providing coaching and developmental feedback.
• Excellent written communication skills, including report writing and explaining technical concepts to non‑technical audiences.
• A strong commercial mindset and the ability to identify opportunities to add value for clients.

Desirable experience

• Experience working with SaaS providers, cloud service providers, fintechs, fund administrators or other outsourced service organisations.
• Understanding of complementary user entity controls (CUECs), subservice organisations and carve‑out or inclusive reporting approaches.
• Experience participating in business development activities, proposals or client presentations.
• Knowledge of ISO 2701, NIST Cybersecurity Framework or COBIT.
• Relevant professional qualifications such as ACA, ACCA, CISA, CIA, CRISC or CISSP.

Knowing we're right for you

Embracing uniqueness, the culture at Grant Thornton thrives on the contributions of all our people. We never settle for what is easy; we look beyond to deliver the right thing for everyone. Building an inclusive culture where we value difference and respect our colleagues helps our people perform at their best and realise their potential.

Our open and accessible culture means you'll interact with leaders who are interested in you and everything you bring to our firm. The things that set you apart, we value them. That's why we give you the freedom to bring your whole self to work and pursue your passions inside and outside of work.

Beyond the job

Life is more than work. The things you do, and the people you’re with outside of work matter, that’s why we're happy to look at flexible working options for all our roles, and we’ll always do our best to keep your work and life in balance.

The impact you can make here will go far beyond your day job. From secondments, to fundraising for local charities, or investing in entrepreneurs in the developing world, you’ll be giving back to society. It's that drive to do the right thing that runs through our every move, grounded in our CLEARR values: Collaboration, Leadership, Excellence, Agility, Respect and Responsibility.

We’re looking for people who want to contribute, spark fresh ideas and go beyond expectations. People who want to be able to proudly do what’s right, for the firm, our clients, our people and themselves. It’s how it should be.