Attestation Reporting (SOC) Senior

Grant Thornton; Makati; Hybrid; PHP 900,000 - 1,200,000; Full time

Job summary

Grant Thornton in the Philippines (Makati) is seeking a skilled attestation professional to support engagements under ISAE3402, SSAE18 and SOC2. The role covers planning, risk assessments, walkthroughs, and controls testing in financial services environments.

You will evaluate ITGCs, automated controls, key reports, and EUCs while leveraging AI tools to improve audit quality and efficiency, and you will collaborate with senior client stakeholders and external auditors to obtain evidence and

Qualifications

• 3+ years’ direct delivery experience in audit, risk advisory or attestation services
• Knowledge of ISAE3402, SSAE18 and/or SOC2 Trust Service
• Excellent English writing and reporting skills

Responsibilities

• Support all stages of attestation engagements including planning, risk assessments, walkthroughs, controls testing, and reporting.
• Audit business processes and transaction-level controls within financial services or similar industries.
• Engage with client stakeholders and external auditors to obtain evidence and communicate observations effectively.
• Evaluate automated controls, key reports, interfaces, EUCs and system-generated information used in control execution.

Skills

Attestation frameworks

Testing requirements

Auditing in financial services

IT literacy

AI tools usage

Stakeholder communication

Analytical skills

Multitasking

Education

Degree in Accounting or Information Systems

Tools

MS Office

AI tools (CoPilot)

Job description

Ideal Candidate:

• Knowledge of attestation reporting frameworks (ISAE3000, ISAE3402 and AICPA SOC1 (SSAE18) and SOC2 Trust Service Criteria) with an emphasis on testing requirements, auditing in financial services, and basic accounting principles.
• Experience supporting all stages of attestation engagements including planning, risk assessments, walkthroughs, controls testing, evaluation of deficiencies and preparation of draft assurance reports.
• Proven experience in auditing business processes and transaction-level controls within financial services or similar industries, with a focus on financial reporting risks, either in the context of SOC 1 / ISAE 3402 engagements or internal audits.
• A foundational understanding of technology and technical concepts is required. Experience in auditing IT General Controls (ITGCs) that support key business processes is highly desirable.
• Experience evaluating automated controls, key reports, interfaces, end-user computing controls (EUCs) and system-generated information used in control execution.
• Demonstrated ability to leverage AI-enabled tools (e.g., Microsoft Copilot, ChatGPT Enterprise, data analytics and automation platforms) to improve audit quality, testing efficiency, documentation and knowledge management.
• Demonstrated ability to engage with senior client stakeholders, control owners and external auditors to obtain evidence, evaluate controls and communicate observations effectively.
• Have excellent communication and written reporting skills and an ability to set own high standards of performance and delivering desired results.
• Be an enthusiastic self-starter that has excellent analytical skills with the ability to identify and analyse problems, propose potential improvements to clients.
• Experience of working to deadlines, ability to multitask and work in a fast paced environment.

Experience / Qualifications:

• 3+ years’ direct delivery experience in audit, risk advisory or attestation services, in practice or industry
• Possesses good working knowledge / understanding of ISAE3402, SSAE18 and/or SOC2 Trust Service

Criteria

• Degree in Accounting, Information systems or related field
• Good level of IT literacy with a track record of using AI (CoPilot etc.) / automated controls testing tools as well as knowledge of the full MS Office suite
• CPA, ACA, ACCA, CISA, CISSP, CRISC or equivalent professional certification preferred