Senior Assurance Specialist – SOC, ISO & HITRUST

BDO USA; San Jose (CA); On-site; USD 85,000 - 125,000; Full time

Job summary

BDO USA is seeking an Assurance Senior focused on Third Party Attestation. You will prepare SOC 1/2/3, SOC for Cybersecurity, WebTrust, HITRUST, ISO, MRC and CSA STAR reports, applying applicable standards and validating client controls.

The role emphasizes understanding IT risk, control environments, and engagement team collaboration. You will plan and execute examinations, test controls, document findings, and communicate with clients and audit committees.

Qualifications

• Two (2) or more years of IT, internal or external audit experience
• Experience performing SOC, WebTrust, HITRUST, SOX, ISO 27001 and security/privacy advisory engagements preferred
• Bachelor’s degree required; CPA/CISA/CISSP/CISM certifications encouraged
• Knowledge of internal controls and professional standards (SOC, ISO, SOX) desired

Responsibilities

• Prepare third-party attestation reports (SOC 1/2/3, SOC for Cybersecurity) and related documentation
• Plan and execute attestation examinations including understanding control environments
• Design test plans, evaluate deficiencies, and assess overall financial reporting controls
• Review work with engagement staff and communicate findings to clients
• Assist with planning and supervising engagement teams and coaching junior staff

Skills

Auditing knowledge

Communication

Supervisory experience

IT controls understanding

Risk assessment

Education

Bachelor's degree in Accounting/ MIS/ Finance

Master’s degree preferred

Tools

Microsoft Office

ERP systems

Databases/ SQL (basic)

Job description

BDO USA is seeking an Assurance Senior focused on Third Party Attestation. You will prepare SOC 1/2/3, SOC for Cybersecurity, WebTrust, HITRUST, ISO, MRC and CSA STAR reports, applying applicable standards and validating client controls.

The role emphasizes understanding IT risk, control environments, and engagement team collaboration. You will plan and execute examinations, test controls, document findings, and communicate with clients and audit committees.