Third-Party Assurance Associate – SOC/HITRUST Attestation

BDO USA; Fort Lauderdale (FL); On-site; USD 70,000 - 90,000; Full time

Benefits offered by this job

ESOP ownership

Total Rewards benefits

Career growth

Job summary

BDO USA is hiring an Assurance Experienced Associate in Third Party Attestation to prepare SOC and related attestation reports, validate controls, and contribute to client risk assessments. The role supports IT controls work across multiple standards and requires knowledge of professional standards and BDO methodologies.

The position emphasizes collaboration with engagement teams, documentation of workpapers, and ongoing professional development through required CPE hours and training.

Qualifications

• Bachelor’s degree required in Accounting, Computer Science, MIS, Business Admin, Finance or Economics
• 1+ years of IT audit or related experience required
• Experience with SOC, WebTrust, HITRUST, SOX, ISO 27001 and security/privacy engagements preferred
• CISA/CISSP/CPA or similar certifications preferred

Responsibilities

• Prepare third‑party attestation reports (SOC 1, SOC 2, SOC 3, SOC for Cybersecurity) and related standards
• Document, validate, test, and assess client control systems and internal controls
• Assess and communicate risks; contribute to engagement planning and execution
• Maintain knowledge of professional standards and BDO methodologies

Skills

Audit knowledge

SOC familiarity

IT controls

Communication

Education

Bachelor’s degree in Accounting/CS/MIS/Business

Master’s degree preferred in Accounting or IS

Tools

MS Office

ERP systems

SQL/Databases

Unix/Windows

Job description

BDO USA is hiring an Assurance Experienced Associate in Third Party Attestation to prepare SOC and related attestation reports, validate controls, and contribute to client risk assessments. The role supports IT controls work across multiple standards and requires knowledge of professional standards and BDO methodologies.

The position emphasizes collaboration with engagement teams, documentation of workpapers, and ongoing professional development through required CPE hours and training.