SOC Reporting & Controls Consultant

Job Description

We are working with an investment management firm that is hiring a SOC Reporting & Controls Consultant to support its SOC reporting program and controls advisory work.

Responsibilities

• Advise business and technology teams on control risks, and help design and put in place controls when people, processes or systems change.
• Conduct the yearly SOC scoping assessment: run internal walkthroughs, map assertions, carry out periodic testing and assemble scoping packages for the outside auditors.
• Act as the link between internal testers and external auditors so audits finish and reports issue on time, escalating issues and tracking them through remediation.
• Prepare the annual SOC report draft for review by management and the external auditors.
• Keep the control inventory current as SOC controls change, and let affected stakeholders know.
• Run quarterly certifications for control owners, from preparing materials and tracking completion to reporting results to management.
• Review control and process incidents to assess their effect on SOC reporting, and work with risk management to confirm remediation plans address the risk to clients relying on the reports.
• Develop and lead annual training for control owners.

Requirements

• 4+ years in SOC reporting, audit or a related area; background in Big 4, financial services, asset management, insurance or investments strongly preferred.
• Understanding of internal controls, IT governance and the standards that apply to SOC reports.
• Experience leading and managing audits.
• Strong analytical and problem-solving skills, along with project management ability.
• Clear, confident communicator who can explain complex topics to varied audiences and work well across departments and with outside partners.
• Strong interpersonal skills and discretion with sensitive, confidential matters.
• Able to prioritize competing demands and hit deadlines in a fast-paced, rigorous setting.
• Degree (bachelor’s) in accounting, finance, IT or a related discipline; a CPA, CISA or CIA is a plus.