Assistant Manager - SOC Reporting

Grant Thornton UK; Greater London; On-site; GBP 55,000 - 75,000; Full time

Job summary

Grant Thornton UK LLP in the United Kingdom seeks an Assistant Manager to join the System and Organisation Controls (SOC) team. You will deliver SOC 1, SOC 2, ISAE 3402 engagements and lead fieldwork, testing and reporting, while developing strong client relationships and advising on IT controls and risk governance.

You’ll work with technology risk, financial services and audit teams to strengthen controls in cloud and on-premise environments, with opportunities for progression and flexible

Qualifications

• 4+ years' experience in IT audit or technology risk.
• Experience delivering SOC 1/2, ISAE 3402 or AAF 01/20.

Responsibilities

• Deliver SOC 1, SOC 2, AAF 01/20 and ISAE 3402 engagements from planning through completion.
• Lead fieldwork, walkthroughs, testing and reporting.
• Assess IT general controls and information security controls.
• Evaluate risk areas including cloud environments and third-party risk.
• Manage client relationships and act as day-to-day contact.
• Coach junior team members and support their development.
• Support engagement planning, budgeting and resourcing.
• Collaborate with clients to strengthen governance and controls.
• Contribute to business development and methodology enhancements.
• Build internal relationships across Technology Risk, FS and Audit teams.

Skills

SOC engagements

ITGCs

Cloud controls

Stakeholder management

Job description

Alternatively, Grant Thornton At Grant Thornton we do things differently - looking to the future, driving ambitious growth and pioneering positive change in our industry. Providing audit, tax and advisory services, we empower clients through strategic insight, curiosity, and genuine partnership. And we empower our people with real opportunity, an inclusive culture and work life balance. A true alternative.

With over 5,000 people in the UK, and a presence in 150 global markets, we're on an ambitious journey, from great to exceptional, and we need the best people to help us achieve our potential. And with that comes the opportunity to help redefine what our industry looks like, and what you want from your career.

Job Description

Assistant Manager - SOC 1, SOC 2 & ISAE 3402

MORE THAN YOU EXPECTED

Grant Thornton UK LLP is part of a global network of independent audit, tax and advisory firms, made up of some 58,000 people in over 135 countries. We're a team of independent thinkers who put quality, inclusion and integrity first. All around the world we bring a different experience to our clients. A better experience. One that delivers the expertise they need in a way that goes beyond. Personal, proactive, and agile. That's Grant Thornton.

BUILDING TRUST THROUGH ASSURANCE

Every day our teams help people in businesses and communities to do what is right and achieve their goals.

As part of Grant Thornton's Specialist Assurance team, our System and Organisation Controls (SOC) practice helps organisations build trust with customers, regulators and stakeholders through independent assurance reporting. We work with a wide range of organisations across technology, financial services, fintech, outsourcing, SaaS, cloud and business process service providers, delivering SOC 1, SOC 2, AAF 01/20 and ISAE 3402 engagements.

We're looking for an Assistant Manager with a strong IT controls background who is interested in understanding how technology, security, operations and governance come together to support effective control environments. This role offers significant client exposure, opportunities to develop as a trusted advisor, and the chance to work with some of the UK's most innovative organisations.

We're happy to talk flexible working and consider reduced hours and job shares. We'll support you to balance your work and life.

A look into the role

As an Assistant Manager within our System and Organisation Controls (SOC) team, you will play a key role in the delivery of assurance engagements, helping service organisations demonstrate the effectiveness of their control environments to customers and stakeholders.

You will:

• Deliver SOC 1, SOC 2, AAF 01/20 and ISAE 3402 assurance engagements from planning through to completion.
• Lead fieldwork, including walkthroughs, control testing, evidence evaluation and reporting.
• Assess the design and operating effectiveness of IT general controls, information security controls and automated business controls.
• Evaluate technology risk areas including logical access, change management, IT operations, cybersecurity, cloud environments and third-party risk management.
• Manage client relationships and act as a day-to-day point of contact throughout engagements.
• Review the work of Associates and Senior Associates, providing coaching and support to aid their development.
• Support engagement planning, budgeting, resourcing and delivery against agreed timelines.
• Work closely with clients to understand their services, systems and control environments, identifying opportunities to strengthen governance and controls.
• Contribute to business development activities, proposals, methodology enhancement and the continued growth of the practice.
• Build strong internal relationships across Technology Risk, Financial Services and Audit teams.

Knowing you're right for us

You’ll need:

• 4+ years' experience in IT audit, technology risk, controls assurance, SOC reporting, external audit or internal audit.
• Experience delivering or supporting SOC 1, SOC 2, ISAE 3402 or AAF 01/20 engagements.
• Strong understanding of IT General Controls (ITGCs), including user access management, privileged access management, change management, IT operations, backup and recovery, and incident management.
• Experience evaluating control design and operating effectiveness.
• Understanding of information security and technology control environments, including cloud-hosted services and outsourced service providers.
• Experience managing client relationships and leading meetings with senior stakeholders.
• Strong project management skills with the ability to manage multiple engagements and deadlines.
• Experience reviewing the work of junior team members and providing coaching and developmental feedback.
• Excellent written communication skills, including report writing and explaining technical concepts.

A strong commercial mindset and the ability to add v