Senior Associate, SOC

About Schellman Schellman is a Top 50 CPA firm and a leading provider of attestation and compliance services. We focus on security and privacy audits, assessments, and certifications. We are an accredited multi‑framework ISO Certification Body for security, privacy, business continuity, and quality; a globally licensed PCI Qualified Security Assessor and a top provider to clients serving the federal DoD space as a leading FedRAMP 3PAO and the first assessment firm authorized as a CMMC C3PAO. We specialize in best‑in‑class Cybersecurity and IT Audits and Attestations. We are recognized as a Great Places to Work certified company and a Best Firm to Work For by Accounting Today and Glassdoor. Our core value “People Come First” drives our culture, benefits, and client interactions. Role Summary Senior associates are primarily responsible for hands‑on project execution. Experienced senior associates have, or are working towards, specialization in one or more service lines and are assigned to projects accordingly. They are supervised by a service delivery principal responsible for their career development and by project management teams. In some occasions senior associates may supervise junior associates or other senior associates when serving as a member of a project management team. The role offers exposure to a variety of SOC examinations and attestations across network, application, or cloud environments, enabling continuous learning and professional growth. Responsibilities Demonstrate proficiency in Schellman Methodology. Guide associates and peers through information sharing, support, and thought leadership. Earn Schellman‑approved certifications: CCSK (minimum requirement for SD), ISO Lead Auditor, and one of: CCSP, CISA, CISSP, AWS CCP, etc.; ISO Lead Auditor within the second year. Run a project from fieldwork through completion, including testing, work‑paper documentation, testing exception documentation, draft report creation, and management representation letter preparation. Understand and speak to Schellman’s service lines at a high level and their leaders. Demonstrate proficiency in SOC 1 ITGCs and each SOC 2 criterion (Security, Availability, Processing Integrity, Confidentiality, Privacy). Understand Principal Service Commitments and System Requirements (PSCRs) and how they impact scope of a SOC 2. Derive PSCRs through client documentation and interviews. Know all four report opinion outcomes and draft modified opinions. Identify if exceptions would yield a qualified opinion. Self‑organize, plan for future projects, and prepare accordingly. Accurately manage and report time worked to each project or initiative. Define a clear communication strategy with the project manager to discuss testing delays, disclosures, etc., in a timely manner. Perform senior‑associate level responsibilities (listed in the last section). Essential Functions Comply with Schellman’s code of ethics, methodologies, policies, and procedures. Adhere to professional and regulatory standards relevant to assigned service lines. Promote Schellman’s culture and exemplify core values. Establish high‑quality relationships and rapport with client personnel. Manage client expectations to exceed them. Complete assigned duties in a timely manner with high attention to detail. Collaborate productively with fellow project team members throughout the life cycle of each project. Adhere to project schedules and keep team members apprised of progress. Escalate issues internally in a proper and timely manner. Use discretion and decorum in client communications. Book travel reservations promptly in accordance with travel and expense policies. Perform essential functions of other service delivery positions when qualified and called upon. Attend project kick‑off and closing meetings. Execute testing procedures, perform detailed analysis, document results, and suggest improvement ideas. Draft project deliverables. Serve as a contact for clients’ basic engagement questions. Participate in recruiting and candidate interview activities. Train project team members. Acculturate newer team members to Schellman. Contribute to Schellman’s practice development efforts. Develop expert knowledge of professional and regulatory standards relevant to assigned service lines. Contribute to thought leadership (e.g., articles, webinars, public speaking, etc.). Knowledge, Skills, and Abilities Working knowledge of Schellman’s services, methodology, and relevant professional standards. Knowledge of applicable technology and security domains. High attention to detail and quality of work product. Client‑service orientation. Excellent time‑management, organization, and verbal and written communication skills. Ability to work on‑site or remotely as a valuable contributor to a collaborative team. Capability to manage multiple tasks across several projects simultaneously. Proficiency with Microsoft Word, Excel, PowerPoint, and Schellman’s service delivery applications. Full understanding and application of ethics, independence, and Schellman’s values. Education, Experience, and Certifications Bachelor’s degree in accounting, finance, business management, technology, or other relevant subject area, or equivalent experience directly related to the duties and responsibilities. Two or more years of related professional services experience in information security auditing, assessment, consulting or compliance, focused on ITGC or SOC controls. Ability to work independently, with clients, and with a team, and willingness to travel 40‑50 % of the time (Monday‑Thursday). Maintains or working toward at least one Schellman‑relevant certification (e.g., CPA, CCSK or CISA). Equal Opportunity Employer Schellman is an equal‑opportunity employer (EOE) and strongly supports diversity in the workplace. We provide equal employment opportunities regardless of race, color, religion, age, sex, sexual orientation, gender identity/expression, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law. Schellman uses E‑Verify in our hiring process. Work Environment We offer a flexible and balanced environment with the possibility to work remotely unless otherwise stated in the job requirements. Service Delivery team members may need to travel annually for internal training, team meet‑ups, strategy meetings, and client needs. #J-18808-Ljbffr Schellman