Assurance Associate, Third Party Attestation -… at BDO USA · Boston

Summary: BDO USA is a leading accounting and advisory firm, and they are seeking an Assurance Associate for their Third Party Attestation team. The role involves preparing third-party attestation reports and assessing various control systems while ensuring compliance with professional standards and enhancing client internal control procedures. Responsibilities: - Identifying and considering all applicable policies, laws, rules, and regulations of the firm, regulators, or other authoritative bodies as part of engagement team - Making constructive suggestions to improve client internal control procedures - Documenting and validating the operating effectiveness of the clients’ internal control system - Documenting business and IT processes and controls and tests key controls for service organizations in a variety of industries - Identifying and prioritizing key risks, and assesses their impact and likeliness of occurrence - Communicating to the client areas to improve processes, strengthen controls, mitigate risks, and/or increase efficiency - Developing and maintaining relationships with client personnel and management - Ensuring technology is appropriately integrated into the examination process - Developing and applying an intermediate knowledge of auditing theory, a sense of audit skepticism, and the use of BDO audit manuals - Applying auditing theory to various client situations - Documenting working papers and attestation reports in line with BDO policy, identifying deviations and notifying more senior team members in order to obtain appropriate approvals - Applying knowledge to identify instances where testing may be reduced or expanded and notifying more senior team members of the occurrence - Contributing ideas/opinions to the engagement team - Completing all appropriate documentation of BDO work papers - Ensuring assigned work is performed in accordance with BDO methodology and requirements - Researching basic and intermediate topics and forming an initial opinion on the treatment independently - Attend professional development and training sessions on a regular basis - Complete required CPE hours to maintain applicable certifications Required Qualifications: - Bachelor's degree in Accounting, Computer Science, Management Information Systems, Finance, Economics, Business Administration, Managerial Marketing and Entrepreneurship with a concentration in any of the previous areas noted, required - Less than one (1) year of prior experience in IT, internal or external audit or relevant industry experience, required - Proficiency in Microsoft Office Suite, specifically Word, Excel, and PowerPoint, required Preferred Qualifications: - Master's degree in Accounting, and minor or dual major in Information Systems or other relevant advanced degree, preferred - Leadership experience, preferred - Experience performing SOC, WebTrust, HITRUST, SOX, ISO 27001 and security/privacy advisory engagements, preferred - Prior internship or experience working within a public accounting or internal auditing environment, preferred - One or more of the following certifications are preferred: Certified Public Accountant (CPA), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), ISO 27001 Lead Auditor certification, HITRUST Certified Common Security Framework Professional (CCSFP), Certified Internal Auditor (CIA), Certified Information Security Manager (CISM), Certified Ethical Hacker (C | EH), Certified in Risk and Information Systems Control (CRISC), Certified in the Governance of Enterprise IT (CGEIT) - Strong written and verbal communication skills - Ability to follow instructions as directed - Ability to work effectively in a team setting - Ability to travel as necessary - Takes appropriate actions without being asked - Basic understanding of the planning and coordination stages of an audit preferred - Ability to successfully interact with professionals at all levels Required Skills: System and Organization Controls (SOC) 1, SOC 2, SOC 3, SOC for Cybersecurity, WebTrust for CAs, HITRUST, SSPA, ISO 27001, MRC, CSA STAR, Internal controls, IT audit, Audit theory, BDO audit manuals, Attestation reports, Microsoft Word, Microsoft Excel, Microsoft PowerPoint, Certified Public Accountant (CPA), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), ISO 27001 Lead Auditor certification, HITRUST Certified Common Security Framework Professional (CCSFP), Certified Internal Auditor (CIA), Certified Information Security Manager (CISM), Certified Ethical Hacker C, Certified Ethical Hacker EH, Certified in Risk and Information Systems Control (CRISC), Certified in the Governance of Enterprise IT (CGEIT) Benefits: BDO is proud to be an ESOP company, reflecting a culture that puts people first, by sharing financially in our growth in value with our U.S. team., BDO is the first large accounting and advisory organization to implement an Employee Stock Ownership Plan (ESOP)., A qualified retirement plan, the ESOP offers participants a stake in the firm’s success through beneficial ownership and a unique opportunity to enhance their financial well-being., The ESOP stands as a compelling addition to our comprehensive compensation and Total Rewards benefits• offerings., The annual allocation to the ESOP is fully funded by BDO through investments in company stock and grants employees the chance to grow their wealth over time as their shares vest and grow in value with the firm’s success, with no employee contributions., We offer flexibility and opportunities for advancement., BDO Total Rewards that encompass so much more than traditional “benefits.” Click here to find out more!, Benefits may be subject to eligibility requirements.