Assurance Experienced Associate, Third Party Attestation

BDO USA; Miami (FL); On-site; USD 70,000 - 90,000; Full time

Job summary

BDO USA is seeking an Assurance Experienced Associate to prepare third-party attestation reports across SOC, HITRUST, ISO and related standards. You will document, validate, test and assess client control systems with emphasis on technology risk and internal controls.

Strong communication and IT risk knowledge are essential for success. The role requires collaboration within engagement teams, attention to detail, and the ability to apply professional standards to varied client environments.

Qualifications

• Bachelor’s degree in Accounting or related field required.
• Master’s degree in Accounting with Information Systems preferred.
• Experience in IT, internal or external audit required.

Responsibilities

• Prepares third-party attestation reports (SOC 1/2/3, SOC for Cybersecurity, WebTrust, HITRUST, ISO, CSA STAR).
• Documents, validates, tests and assesses control systems and internal controls.
• Identify and communicate control deficiencies and improvement opportunities to clients.
• Coordinate with engagement team to ensure proper application of professional standards.

Skills

Audit

SOC reporting

IT risk assessment

Verbal and written communication

Education

Bachelor’s degree in Accounting

Master’s degree in Accounting (preferred)

Tools

Microsoft Office Suite

ERP systems

SQL / databases

Job description

Job Description

The Assurance Experienced Associate, Third Party Attestation will be responsible for the preparation of third-party attestation reports, including System and Organization Controls (SOC) 1, SOC 2, SOC 3, SOC for Cybersecurity and WebTrust for CAs, as well as HITRUST, SSPA, ISO, MRC and CSA STAR applying most areas of the governing standard as necessary and documenting, validating, testing, and assessing various control systems, including internal controls. Our TPA individuals specialize in these specific areas to understand the entire technology risk umbrella rather than maintaining overall knowledge in Information Technology General Control (ITGC) audit or IT audit.

Job Summary

The Assurance Experienced Associate, Third Party Attestation will be responsible for the preparation of third-party attestation reports, including System and Organization Controls (SOC) 1, SOC 2, SOC 3, SOC for Cybersecurity and WebTrust for CAs, as well as HITRUST, SSPA, ISO, MRC and CSA STAR applying most areas of the governing standard as necessary and documenting, validating, testing, and assessing various control systems, including internal controls. Our TPA individuals specialize in these specific areas to understand the entire technology risk umbrella rather than maintaining overall knowledge in Information Technology General Control (ITGC) audit or IT audit.

Job Duties

Control Environment

• Applies knowledge and understanding of the collective effect of various factors on establishing or enhancing effectiveness, or mitigating the risks, of specific policies and procedures by:
  • Identifying and considering all applicable policies, laws, rules, and regulations of the firm, regulators, or other authoritative bodies as part of engagement team
  • Making constructive suggestions to improve client internal control procedures
  • Documenting and validating the operating effectiveness of the clients’ internal control system
  • Documenting business and IT processes and controls and tests key controls for service organizations in a variety of industries
  • Identifying and prioritizing key risks, and assesses their impact and likeliness of occurrence;
  • Communicating to the client areas to improve processes, strengthen controls, mitigate risks, and/or increase efficiency
  • Developing and maintaining relationships with client personnel and management
  • Ensuring technology is appropriately integrated into the examination process

Gaas

• Applies knowledge and understanding of professional standards; application of the principles contained in professional standards; and the ability to document and communicate an understanding and application of professional standards on an engagement by:
  • Developing and applying an intermediate knowledge of auditing theory, a sense of audit skepticism, and the use of BDO audit manuals
  • Applying auditing theory to various client situations
  • Documenting working papers and attestation reports in line with BDO policy, identifying deviations and notifying more senior team members in order to obtain appropriate approvals
  • Applying knowledge to identify instances where testing may be reduced or expanded and notifying more senior team members of the occurrence
  • Contributing ideas and opinions to the engagement team

Methodology

• Applies knowledge and application of BDO standards to guide effective and efficient delivery of quality services and products by:
  • Completing all appropriate documentation of BDO work papers
  • Ensuring assigned work is performed in accordance with BDO methodology and requirements

Research

• Applies methodology used to seek or maintain information from authoritative sources and to draw conclusions regarding a target issue based on the information by:
  • Researching basic and intermediate topics and forming an initial opinion on the treatment independently

Training

• Attend professional development and training sessions on a regular basis
• Complete required CPE hours to maintain applicable certifications
• Other duties as required

Education

Qualifications, Knowledge, Skills and Abilities:

• Bachelor’s degree in Accounting, Computer Science, Management Information Systems, Business Administration, Managerial Marketing and Entrepreneurship, Finance or Economics, required
• Master’s degree in Accounting and minor or dual major in Information Systems or other advanced degree, preferred

Experience

• One (1) or more years of prior experience in IT, internal or external audit or relevant industry experience, required
• Experience performing internal control reviews, preferred
• Experience performing SOC, WebTrust, HITRUST, SOX, ISO 27001 and security/privacy advisory engagements, preferred
• Relevant experience-based internship, preferred

License/Certifications

• One or more of the following certifications are preferred:
• Certified Public Accountant (CPA)
• Certified Information Systems Auditor (CISA)
• Certified Information Systems Security Professional (CISSP)
• ISO 27001 Lead Auditor certification
• HITRUST Certified Common Security Framework Professional (CCSFP)
• Certified Internal Auditor (CIA)
• Certified Information Security Manager (CISM)
• Certified Ethical Hacker (C | EH)
• Certified in Risk and Information Systems Control (CRISC)
• Certified in the Governance of Enterprise IT (CGEIT)

Software

• Proficiency in Microsoft Office Suite, specifically Word, Excel and PowerPoint, required
• Prior experience with various applications (e.g., ERP systems), operating systems (e.g., UNIX, Windows); and databases (e.g., Oracle, SQL), preferred
• Exposure to cloud platforms, SaaS applications, security and engineering tools, and other industry software, preferred

Other Knowledge, Skills & Abilities

• Basic understanding and experience planning and coordinating the stages to perform technology-focused audits and assessments
• Knowledge of internal controls and professional standards and regulations (SOC, ISO, WebTrust, HITRUST, Sarbanes-Oxley, etc.)
• Knowledge of data analytics and emerging technologies beneficial
• Strong verbal and written communication skills with the ability to adapt style and messaging to effectively communicate and interact with professionals at all levels both within the client organization and the firm
• Ability to successfully multi-task while working independently and within a group environment
• Solid analytical and diagnostic skills and ability to break down complex issues and implementing appropriate resolutions
• Able to work in a demanding, deadline driven environment with a focus on details and accuracy
• Solid project management skills
• Ability to travel as necessary

Individual salaries that are offered to a candidate are determined after consideration of numerous factors including but not limited to the candidate’s qualifications, experience, skills, and geography.

California Range: $79,000 - $90,000

Colorado Range: $74,000 - $80,000

Illinois Range: $75,000 - $80,000

Massachusetts Range: $75,000 - $80,000

Minnesota Range: $70,000 - $80,000

NYC/Long Island/Westchester Range: $75,000 - $80,000

About Us

At BDO, how we show up matters. We build strong relationships by supporting one another, our clients, and our communities with care, curiosity, and a commitment to helping one another grow and succeed. Here, you’ll find meaningful work, leaders invested in your success, and opportunities to build a career around what matters most to you.

Our purpose is to be the people our clients count on to grow with confidence and achieve what matters most. Our values guide how we bring that purpose to life each day. Together, they shape how we work with one another, serve our clients, and create meaningful impact.

BDO provides assurance, tax, and advisory services to clients across the U.S. and around the world. No matter your role, you’ll be part of a team helping clients navigate complexity and move forward with clarity.

We are proud to be an ESOP company, offering participants a stake in the firm’s success through beneficial ownership and a unique opportunity to enhance their financial well-being. As a qualified retirement plan, the ESOP is a meaningful addition to our comprehensive compensation and Total Rewards benefits* offerings. It also reinforces an ownership mindset that strengthens our connection to one another, our clients, and the future we’re building together.

Learn more about our benefits: BDO Total Rewards encompass more than traditional benefits.

• Benefits may be subject to eligibility requirements.

Equal Opportunity Employer, including disability/vets

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status.

BDO USA, P.A. is an EO employer M/F/Veteran/Disability