Assistant Manager - SOC Reporting

Grant Thornton Cyber Defence Centre; Greater London; On-site; GBP 70,000 - 95,000; Full time

Benefits offered by this job

Life cover

Income protection

Matched pension

Dental and eye care

Doctor@Hand

Mortgage advice

Will writing

Bike schemes

Job summary

Grant Thornton in London is seeking an Assistant Manager for SOC 1, SOC 2 & ISAE 3402 engagements. You will deliver assurance across planning to completion, lead fieldwork, assess IT general controls and information security, and manage client relationships.

You will coach junior staff, support budgeting, and help grow the practice while collaborating with Technology Risk and Audit teams. Flexible working options may be considered.

Qualifications

• 4+ years' experience in IT audit, technology risk, controls assurance, SOC reporting, external or internal audit.
• Experience delivering or supporting SOC 1, SOC 2, ISAE 3402 or AAF 01/20 engagements.
• Strong understanding of IT General Controls (ITGCs) including user access management & change control.
• Experience evaluating control design and operating effectiveness.
• Knowledge of information security and cloud/outsourced service environments.
• Experience managing client relationships and leading meetings with senior stakeholders.
• Excellent written communication, report writing and explaining technical concepts.

Responsibilities

• Deliver SOC 1, SOC 2, AAF 01/20 and ISAE 3402 engagements from planning to completion.
• Lead fieldwork, walkthroughs, testing, evidence evaluation and reporting.
• Assess IT general controls and information security control environments.
• Evaluate risks including cloud environments, third-party risk and IT operations.
• Manage client relationships and act as day-to-day contact during engagements.
• Review junior staff work, provide coaching and development feedback.
• Support engagement planning, budgeting and resourcing to meet timelines.
• Collaborate with clients to understand services and governance environments.
• Contribute to business development and methodology enhancements.
• Build internal relationships across Technology Risk, Financial Services and Audit teams.

Skills

IT audit

SOC reporting

ITGCs

Stakeholder management

Project management

Report writing

Client relationships

Coaching junior staff

Education

ACA

ACCA

CISA

CIA

CRISC

CISSP

Job description

Experienced Hire

Assistant Manager - SOC Reporting

London

Permanent

Full time

Core Advisory

Benefits To Help You Thrive, Such As

Core benefits including life cover, income protection and matched pension Supporting your health with screening, dental and eye care and Doctor@Hand Financial support through mortgage advice, will writing, investment accounts and more Lifestyle benefits including buying holiday, bike schemes, discounts and cashback Alternatively, Grant Thornton

At Grant Thornton we do things differently - looking to the future, driving ambitious growth and pioneering positive change in our industry. Providing audit, tax and advisory services, we empower clients through strategic insight, curiosity, and genuine partnership. And we empower our people with real opportunity, an inclusive culture and work life balance. A true alternative.

With over 5,000 people in the UK, and a presence in 150 global markets, we're on an ambitious journey, from great to exceptional, and we need the best people to help us achieve our potential. And with that comes the opportunity to help redefine what our industry looks like, and what you want from your career.

Job Description

Assistant Manager - SOC 1, SOC 2 & ISAE 3402

MORE THAN YOU EXPECTED

Grant Thornton UK LLP is part of a global network of independent audit, tax and advisory firms, made up of some 58,000 people in over 135 countries. We’re a team of independent thinkers who put quality, inclusion and integrity first. All around the world we bring a different experience to our clients. A better experience. One that delivers the expertise they need in a way that goes beyond. Personal, proactive, and agile. That’s Grant Thornton.

BUILDING TRUST THROUGH ASSURANCE

Every day our teams help people in businesses and communities to do what is right and achieve their goals.

As part of Grant Thornton's Specialist Assurance team, our System and Organisation Controls (SOC) practice helps organisations build trust with customers, regulators and stakeholders through independent assurance reporting. We work with a wide range of organisations across technology, financial services, fintech, outsourcing, SaaS, cloud and business process service providers, delivering SOC 1, SOC 2, AAF 01/20 and ISAE 3402 engagements.

We're looking for an Assistant Manager with a strong IT controls background who is interested in understanding how technology, security, operations and governance come together to support effective control environments. This role offers significant client exposure, opportunities to develop as a trusted advisor, and the chance to work with some of the UK's most innovative organisations.

We're happy to talk flexible working and consider reduced hours and job shares. We'll support you to balance your work and life.

A look into the role

As an Assistant Manager within our System and Organisation Controls (SOC) team, you will play a key role in the delivery of assurance engagements, helping service organisations demonstrate the effectiveness of their control environments to customers and stakeholders.

You Will

• Deliver SOC 1, SOC 2, AAF 01/20 and ISAE 3402 assurance engagements from planning through to completion.
• Lead fieldwork, including walkthroughs, control testing, evidence evaluation and reporting.
• Assess the design and operating effectiveness of IT general controls, information security controls and automated business controls.
• Evaluate technology risk areas including logical access, change management, IT operations, cybersecurity, cloud environments and third-party risk management.
• Manage client relationships and act as a day-to-day point of contact throughout engagements.
• Review the work of Associates and Senior Associates, providing coaching and support to aid their development.
• Support engagement planning, budgeting, resourcing and delivery against agreed timelines.
• Work closely with clients to understand their services, systems and control environments, identifying opportunities to strengthen governance and controls.
• Contribute to business development activities, proposals, methodology enhancement and the continued growth of the practice.
• Build strong internal relationships across Technology Risk, Financial Services and Audit teams.

Knowing you're right for us

You’ll Need

• 4+ years' experience in IT audit, technology risk, controls assurance, SOC reporting, external audit or internal audit.
• Experience delivering or supporting SOC 1, SOC 2, ISAE 3402 or AAF 01/20 engagements.
• Strong understanding of IT General Controls (ITGCs), including user access management, privileged access management, change management, IT operations, backup and recovery, and incident management.
• Experience evaluating control design and operating effectiveness.
• Understanding of information security and technology control environments, including cloud-hosted services and outsourced service providers.
• Experience managing client relationships and leading meetings with senior stakeholders.
• Strong project management skills with the ability to manage multiple engagements and deadlines.
• Experience reviewing the work of junior team members and providing coaching and developmental feedback.
• Excellent written communication skills, including report writing and explaining technical concepts to non-technical audiences.
• A strong commercial mindset and the ability to identify opportunities to add value for clients.

Desirable Experience

• Experience working with SaaS providers, cloud service providers, fintechs, fund administrators or other outsourced service organisations.
• Understanding of complementary user entity controls (CUECs), subservice organisations and carve-out or inclusive reporting approaches.
• Experience participating in business development activities, proposals or client presentations.
• Knowledge of ISO 27001, NIST Cybersecurity Framework or COBIT.
• Relevant professional qualifications such as ACA, ACCA, CISA, CIA, CRISC or CISSP.

Knowing we're right for you

Embracing uniqueness, the culture at Grant Thornton thrives on the contributions of all our people. We never settle for what is easy; we look beyond to deliver the right thing for everyone. Building an inclusive culture where we value difference and respect our colleagues helps our people perform at their best and realise their potential.

Our open and accessible culture means you'll interact with leaders who are interested in you and everything you bring to our firm. The things that set you apart, we value them. That's why we give you the freedom to bring your whole self to work and pursue your passions inside and outside of work.

Beyond the job

Life is more than work. The things you do, and the people you’re with outside of work matter, that’s why we’re happy to look at flexible working options for all our roles, and we’ll always do our best to keep your work and life in balance.

The impact you can make here will go far beyond your day job. From secondments, to fundraising for local charities, or investing in entrepreneurs in the developing world, you’ll be giving back to society. It’s that drive to do the right thing that runs through our every move, grounded in our CLEARR values: Collaboration, Leadership, Excellence, Agility, Respect and Responsibility.

We’re looking for people who want to contribute, spark fresh ideas and go beyond expectations. People who want to be able to proudly do what’s right, for the firm, our clients, our people and themselves. It’s how it should be.

Celebrating our inclusive culture

Stonewall LGBTQ+ Inclusive Employer

Working Families Top 10 Employer

Employee Index Top 75 Employer

Black Talent Charter

Top 10 Muslim Employee Networks

Disability Confident Employer

Inclusive Employers

Menopause Workplace Pledge

The Prince's Responsible Business Network

Women in Finance Charter