Assurance Senior Manager, Third Party Attestation

BDO USA; Tampa (FL); On-site; USD 100,000 - 130,000; Full time

Job summary

BDO USA is seeking an Assurance Senior Manager, Third Party Attestation in Tampa, Florida. This role requires advanced knowledge in areas such as SOC audits and regulatory compliance, alongside a strong focus on client relationships and managing audit teams. The ideal candidate will have over eight years of audit experience and a bachelor's degree in accounting or related field.

The position emphasizes effective communication skills, leadership in audit execution, and expertise in internal control assessments. Professional certifications like CPA or CISA are essential.

Qualifications

• Bachelor’s degree in Accounting, Computer Science, or related field required.
• Master’s degree preferred.
• 8+ years of internal or external audit experience required.

Responsibilities

• Supervise audit team and ensure quality work.
• Maintain key client relationships.
• Plan and execute attestation examinations.

Skills

Advanced knowledge of auditing theory

Client relationship management

Technical accounting standards

Communication skills

Analytical skills

Education

Bachelor’s degree in Accounting or related field

Master’s degree in Accounting or Information Systems

Tools

Microsoft Office Suite

Cloud technology platforms

Job description

JOB DESCRIPTION

The Assurance Senior Manager, Third Party Attestation is reserved for professionals who have achieved recognition in a specific technical area of third-party attestation reporting. This includes expertise in System and Organization Controls (SOC) 1, SOC 2, SOC 3, SOC for Cybersecurity, WebTrust for CAs, HITRUST, SSPA, ISO, MRC, and CSA STAR. The Assurance Senior Manager, Third Party Attestation actively participates in the marketing, networking and business development within an area of expertise and specialization while maintaining client relationships and acting as the primary contact for complex questions. Additionally, the Assurance Senior Manager, Third Party Attestation is expected to maintain key client relationships and act as the primary contact for clients regarding complex technical areas impacting their engagements.

Job Duties

Control Environment

• Applies advanced knowledge and understanding of the collective effect of various factors on establishing or enhancing effectiveness, or mitigating the risks, of specific policies and procedures by:
• Identifying and considering all applicable policies, laws, rules, and regulations of the firm, regulators, or other authoritative bodies as part of engagement team
• Identifying and making constructive suggestions to improve client internal controls
• Ensuring proper documentation of the clients’ internal control system
• Ensuring proper documentation of the clients’ business and IT processes and controls and tests key controls in a variety of industries
• Supervising the work of the audit team and review workpapers and conclusions preferably onsite during audit field work
• Identifying and delegating functions of the audit to the auditor in the charge as deemed appropriate
• Providing on-the-job training to the engagement team during field work
• Identifying and prioritizing key risks, and assessing their impact and likelihood of occurrence
• Communicating to the client areas to improve processes, strengthen controls, mitigate risks, and/or increase efficiency
• Developing and maintaining relationships with client personnel and management
• Ensuring technology is appropriately integrated into the examination process
• Developing and applying an advanced knowledge of MRC’s Minimum Standards and other relevant industry criteria (e.g., IAB, POCMA, TAG), and incorporates them into risk assessment and control evaluation, as applicable

GAAS

• Applies advanced knowledge and understanding of professional standards; application of the principles contained in professional standards; and the ability to document and communicate an understanding and application of professional standards on an engagement by:
• Developing and applying an advanced knowledge of auditing theory, a sense of audit skepticism, and the use of BDO audit manuals
• Applying auditing theory to various client situations
• Identifying complex issues, including deviations, and forming a resolution, seeking the counsel of BDO technical experts as needed
• Applying knowledge to identify instances where testing may be reduced or expanded and providing counsel to the members of the audit team
• Developing and applying an advanced knowledge of AT-C 105/205 tailored to non-financial metrics and providing counsel to the members of the audit team

Other

• Applies advanced knowledge and understanding of governing principles; applying these principles to client transactions; and documenting and communicating an understanding and application of these principles by:
• Planning and executing attestation examinations including obtaining an understanding of the control environment, designing test plans, evaluating deficiencies and assessing the overall financial reporting control environment
• Planning and executing readiness assessments and roadmaps, including gap analyses against relevant criteria
• Reading and reviewing clients’ reports, ensuring accuracy and completeness, and also ensuring that all supporting information is documented in the workpapers and through appropriate testing
• Preparing required communications to the client and the Audit Committee, as applicable
• Recognizing and applying new pronouncements to client situations
• Identifying, analyzing and discussing alternative principles with the Manager, Senior Manager and engagement partner and the client, as needed
• Identifying complex issues and brings them to the attention of superiors for resolution
• Coaching less experienced team members in new areas

Methodology

• Applies advanced knowledge and application of BDO standards to guide effective and efficient delivery of quality services and products by:
• Conducting detailed reviews to assure audits are completed in accordance with assurance manual standards
• Preparing or reviewing required communications to management and audit committees, ensuring timeliness and completeness
• Recommending appropriate outcomes to critical issues
• Initiating and preparing client acceptance/retention procedures where appropriate
• Planning the audit process and overseeing the execution of procedures with quality, efficiency, and completeness despite pressures of deadlines
• Executing proper BDO methodology including but not limited to proper archiving procedures
• Leading the design, documentation, and continuous improvement of a BDO audit methodology as it relates to relevant industry criteria (e.g., MRC, IAB, POCMA, TAG standards and guidelines); defines procedure libraries, evidence expectations, data requirements, re‑performance techniques (e.g., log‑level analyses, instrumentation testing, code/logic walkthroughs), and calibrates materiality/sampling

Research

• Applies methodology used to seek or maintain information from authoritative sources and to draw conclusions regarding a target issue based on the information by:
• Applying advanced knowledge of all appropriate research tools and drawing conclusions based upon appropriate research
• Preparing memos supporting research/conclusions and consulting with others if appropriate
• Presenting issues to RTD or concurring reviewer effectively and accurately
• Monitors and disseminates updates to industry standards and related industry specifications (e.g., MRC standards and guidelines, IAB Tech Lab standards such as VAST, Open Measurement SDK, ads.txt/sellers.json) and evaluates audit implications
• Advises clients on industry changes that affect measurement (e.g., third party cookie deprecation, IP anonymization, app tracking transparency, evolving IVT tactics) and the corresponding audit implications
• Evaluates novel client methodologies (e.g., ML-based IVT detection, cross-media deduplication) and their audit implications
• Represents BDO on relevant industry associations and working groups (e.g., MRC standard setting working groups)

Supervisory Responsibilities

• Setting the tone for teamwork by supporting others in their work and delivering on commitments made to the team members and clients
• Supervising of managers, senior associates, and associates on all projects
• Reviewing work prepared by managers, senior associates, and associates and provide review comments
• Acting as a Career Advisor to senior associates and associates
• Scheduling and managing workload of senior associates and associates
• Providing verbal and written performance feedback to senior associates and associates
• Teach/coach managers, senior associates and associates to provide on the job learning

Education

(No specific education requirements listed beyond degrees detailed in qualifications.)

Qualifications, Knowledge, Skills, and Abilities:

• Bachelor’s degree in Accounting, Computer Science, Management Information Systems, Business Administration, Managerial Marketing and Entrepreneurship, Finance or Economics, required
• Master’s degree in Accounting or Information Systems or other relevant advanced degree, preferred

Experience

• Eight (8) or more years of experience in internal or external audit, required
• More than Five (5) years of prior supervisory experience, preferred
• Experience performing internal control reviews, preferred
• Experience performing MRC, SOC, WebTrust, ISO 27001 and security/privacy advisory engagements, preferred
• Experience with digital advertising and media tech stacks (ad servers, SDKs, DSP/SSP/exchanges, MMPs, CDP/DMP, SSAI), and how signals flow through the ecosystem, preferred

License/Certifications

One (1) or more of the following certifications are required:

• Certified Public Accountant (CPA)
• Certified Information Systems Auditor (CISA)

Software

• Proficiency in the use of Microsoft Office Suite, required
• Prior experience with cloud technology platforms and tools, security and operational IT controls, PKI and encryption technology, preferred
• Proficiency with data analysis over large datasets and interpreting log-level telemetry, preferred

Language

• N/A

Other Knowledge, Skills & Abilities

• Passion for developing and mentoring a growing team and helping to drive business growth
• Advanced understanding and experience planning and coordinating the stages to perform technology-focused audits and assessments
• Knowledge of internal controls, security, privacy, audit and control frameworks (e.g. SOC 2, ISO 27001, NIST 800-53), and relevant professional standards and regulations Knowledge of cloud infrastructure management, DevOps and CI/CD, system access management, vulnerability management, and encryption systems management
• Knowledge of data analytics and emerging technologies
• Strong verbal and written communication skills with the ability to adapt style and messaging to effectively communicate with professionals at all levels both within the client organization and the firm
• Ability to successfully multi-task while working independently and within a group environment
• Solid analytical and diagnostic skills and ability to break down complex issues and implementing appropriate resolutions
• Able to work in a demanding, deadline driven environment with a focus on details and accuracy
• Solid project management skills
• Ability to travel as necessary
• Ability to successfully interact with professionals at all levels

Equal Opportunity Employer

Equal Opportunity Employer, including disability/vets

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status.

'BDO USA, P.A. is an EO employer M/F/Veteran/Disability'