Assistant Manager - SOC Reporting

Grant Thornton UK LLP; Greater London; Hybrid; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Flexible working

Work-life balance

Job summary

Grant Thornton UK LLP is looking for an Assistant Manager to join the Specialist Assurance team. You will deliver SOC 1, SOC 2 and ISAE 3402 engagements from planning through to completion and lead fieldwork, testing and reporting across diverse client environments.

You will assess IT general controls and information security controls, manage client relationships, and coach junior staff while identifying opportunities to strengthen governance and controls. Flexible working options are available.

Qualifications

• 4+ years' experience in IT audit, technology risk, controls assurance, SOC reporting, external audit or internal audit.
• Experience delivering or supporting SOC 1, SOC 2, ISAE 3402 or AAF 01/20 engagements.
• Strong understanding of IT General Controls (ITGCs), including user access management, privileged access management, change management, IT operations, backup and recovery, and incident management.
• Experience managing client relationships and leading meetings with senior stakeholders.
• Excellent written communication skills, including report writing and explaining technical concepts to non-technical audiences.
• A strong commercial mindset and the ability to identify opportunities to add value for clients.

Responsibilities

• Deliver SOC 1, SOC 2, AAF 01/20 and ISAE 3402 assurance engagements from planning through to completion.
• Lead fieldwork, including walkthroughs, control testing, evidence evaluation and reporting.
• Assess the design and operating effectiveness of IT general controls, information security controls and automated business controls.
• Evaluate technology risk areas including logical access, change management, IT operations, cybersecurity, cloud environments and third-party risk management.
• Manage client relationships and act as a day-to-day point of contact throughout engagements.
• Review the work of Associates and Senior Associates, providing coaching and support to aid their development.
• Support engagement planning, budgeting, resourcing and delivery against agreed timelines.
• Work closely with clients to understand their services, systems and control environments, identifying opportunities to strengthen governance and controls.
• Contribute to business development activities, proposals, methodology enhancement and the continued growth of the practice.
• Build strong internal relationships across Technology Risk, Financial Services and Audit teams.

Skills

IT audit

Technology risk

Controls assurance

SOC reporting

External audit

Internal audit

Client relationships

Project management

Report writing

Communication

Leadership coaching

Education

ACA/ACCA

CISA

CIA

CRISC

CISSP

Job description

Alternatively, Grant ThorntonAt Grant Thornton we do things differently - looking to the future, driving ambitious growth and pioneering positive change in our industry. Providing audit, tax and advisory services, we empower clients through strategic insight, curiosity, and genuine partnership. And we empower our people with real opportunity, an inclusive culture and work life balance. A true alternative.With over 5,000 people in the UK, and a presence in 150 global markets, we're on an ambitious journey, from great to exceptional, and we need the best people to help us achieve our potential. And with that comes the opportunity to help redefine what our industry looks like, and what you want from your career.Job Description:Assistant Manager - SOC 1, SOC 2 & ISAE 3402MORE THAN YOU EXPECTEDGrant Thornton UK LLP is part of a global network of independent audit, tax and advisory firms, made up of some 58,000 people in over 135 countries. We’re a team of independent thinkers who put quality, inclusion and integrity first. All around the world we bring a different experience to our clients. A better experience. One that delivers the expertise they need in a way that goes beyond. Personal, proactive, and agile. That’s Grant Thornton.BUILDING TRUST THROUGH ASSURANCEEvery day our teams help people in businesses and communities to do what is right and achieve their goals.As part of Grant Thornton's Specialist Assurance team, our System and Organisation Controls (SOC) practice helps organisations build trust with customers, regulators and stakeholders through independent assurance reporting. We work with a wide range of organisations across technology, financial services, fintech, outsourcing, SaaS, cloud and business process service providers, delivering SOC 1, SOC 2, AAF 01/20 and ISAE 3402 engagements.We're looking for an Assistant Manager with a strong IT controls background who is interested in understanding how technology, security, operations and governance come together to support effective control environments. This role offers significant client exposure, opportunities to develop as a trusted advisor, and the chance to work with some of the UK's most innovative organisations.We're happy to talk flexible working and consider reduced hours and job shares. We'll support you to balance your work and life.A look into the roleAs an Assistant Manager within our System and Organisation Controls (SOC) team, you will play a key role in the delivery of assurance engagements, helping service organisations demonstrate the effectiveness of their control environments to customers and stakeholders.You will:• Deliver SOC 1, SOC 2, AAF 01/20 and ISAE 3402 assurance engagements from planning through to completion.• Lead fieldwork, including walkthroughs, control testing, evidence evaluation and reporting.• Assess the design and operating effectiveness of IT general controls, information security controls and automated business controls.• Evaluate technology risk areas including logical access, change management, IT operations, cybersecurity, cloud environments and third-party risk management.• Manage client relationships and act as a day-to-day point of contact throughout engagements.• Review the work of Associates and Senior Associates, providing coaching and support to aid their development.• Support engagement planning, budgeting, resourcing and delivery against agreed timelines.• Work closely with clients to understand their services, systems and control environments, identifying opportunities to strengthen governance and controls.• Contribute to business development activities, proposals, methodology enhancement and the continued growth of the practice.• Build strong internal relationships across Technology Risk, Financial Services and Audit teams.Knowing you're right for usYou'll need:• 4+ years' experience in IT audit, technology risk, controls assurance, SOC reporting, external audit or internal audit.• Experience delivering or supporting SOC 1, SOC 2, ISAE 3402 or AAF 01/20 engagements.• Strong understanding of IT General Controls (ITGCs), including user access management, privileged access management, change management, IT operations, backup and recovery, and incident management.• Experience evaluating control design and operating effectiveness.• Understanding of information security and technology control environments, including cloud-hosted services and outsourced service providers.• Experience managing client relationships and leading meetings with senior stakeholders.• Strong project management skills with the ability to manage multiple engagements and deadlines.• Experience reviewing the work of junior team members and providing coaching and developmental feedback.• Excellent written communication skills, including report writing and explaining technical concepts to non-technical audiences.• A strong commercial mindset and the ability to identify opportunities to add value for clients.Desirable experience• Experience working with SaaS providers, cloud service providers, fintechs, fund administrators or other outsourced service organisations.• Understanding of complementary user entity controls (CUECs), subservice organisations and carve-out or inclusive reporting approaches.• Experience participating in business development activities, proposals or client presentations.• Knowledge of ISO 27001, NIST Cybersecurity Framework or COBIT.• Relevant professional qualifications such as ACA, ACCA, CISA, CIA, CRISC or CISSP.Knowing we're right for youEmbracing uniqueness, the culture at Grant Thornton thrives on the contributions of all our people. We never settle for what is easy; we look beyond to deliver the right thing for everyone. Building an inclusive culture where we value difference and respect our colleagues helps our people perform at their best and realise their potential.Our open and accessible culture means you'll interact with leaders who are interested in you and everything you bring to our firm. The things that set you apart, we value them. That's why we give you the freedom to bring your whole self to work and pursue your passions inside and outside of work.Beyond the jobLife is more than work. The things you do, and the people you’re with outside of work matter, that’s why we’re happy to look at flexible working options for all our roles, and we’ll always do our best to keep your work and life in balance.The impact you can make here will go far beyond your day job. From secondments, to fundraising for local charities, or investing in entrepreneurs in the developing world, you’ll be giving back to society. It’s that drive to do the right thing that runs through our every move, grounded in our CLEARR values: Collaboration, Leadership, Excellence, Agility, Respect and Responsibility.We’re looking for people who want to contribute, spark fresh ideas and go beyond expectations. People who want to be able to proudly do what’s right, for the firm, our clients, our people and themselves. It’s how it should be.#LI-SS1