Senior Associate, SOC

Overview Schellman is a Top 50 CPA firm and a leading provider of attestation and compliance services. Our professional services focus on security and privacy audits, assessments, and certifications. Schellman has become one of the largest cybersecurity assessment firms in the United States without providing any traditional accounting services. We are an accredited multi‑framework ISO Certification Body for security, privacy, business continuity, and quality; a globally licensed PCI Qualified Security Assessor and a top provider to clients serving the federal DoD space as a leading FedRAMP 3PAO and the first assessment firm authorized as a CMMC C3PAO. Our specialty and expertise remain in providing best‑in‑class Cybersecurity and IT Audits and Attestations. Our culture, approach with clients, and dedication to our values have led us to consistently be a Great Places to Work certified company and to be rated as a Best Firm to Work For by Accounting Today and Glassdoor. We deeply appreciate our employees, as shown by our first core value – “People Come First.” Come see what makes Schellman special! Responsibilities Senior associates are primarily responsible for hands‑on project execution and are expected to have, or be working towards, specialization in one or more service lines. They are assigned to a specific service delivery principal who supervises their career development and to the management teams of their projects. Senior associates may also supervise associates and other senior associates when serving on a project management team. Demonstrate proficiency in Schellman Methodology. Serve as a guide to Associates and peers through information sharing, support, and thought leadership. Earn Schellman‑approved certifications (CCSK minimum requirement for SD, ISO Lead Auditor and one of CCSP/CISA, CISSP, AWS CCP, etc.) and the ISO LA within the second year in the role. Successfully run a project from fieldwork through completion, including all assigned testing, workpaper documentation, testing exception documentation, draft report creation, and management representation letter preparation. Understand and demonstrate ability to speak to Schellman’s service lines at a high level and to their leaders. Demonstrate proficiency of SOC 1 ITGCs and each Security, Availability, Processing Integrity, Confidentiality, and Privacy SOC 2 criteria. Demonstrate understanding of Principal Service Commitments and System Requirements (PSCRs) and how they impact the scope of a SOC 2. Derive PSCRs through client documentation and interviews. Know all four report opinion outcomes and the ability to draft modified opinions. Identify if exception(s) would potentially yield a qualified opinion. Demonstrate self‑organization, consistently and proactively look ahead to future projects, and prepare accordingly. Accurately manage and report time worked to each project/initiative. Define a clear communication strategy with the project manager to ensure any testing delays, disclosures, etc. are discussed timely. Essential Functions Comply with Schellman’s code of ethics, professional conduct, methodologies, policies, and procedures. Adhere to the professional and regulatory standards relevant to assigned service line specializations. Promote Schellman’s company culture and exemplify Schellman’s values. Establish high‑quality relationships and rapport with client personnel. Manage client expectations to ensure expectations are exceeded. Complete assigned duties in a timely manner and with high attention to detail. Collaborate with fellow project team members productively and timely throughout the project lifecycle. Adhere to project schedules and keep fellow team members apprised of progress. Escalate issues internally in a proper and timely manner. Use discretion and decorum in the timing, form, and content of all client communications. Book travel reservations timely and in accordance with Schellman’s travel and expense policies. Perform essential functions of other service delivery positions when qualified and called upon. Attend project kick‑off and closing meetings. Execute assigned testing procedures, perform detailed analysis, reach conclusions, document results, and suggest improvement ideas. Draft project deliverables. Serve as a contact for clients’ basic questions regarding an engagement. Participate in recruiting and candidate interview activities. Train project team members and acclimate newer team members to Schellman. Contribute to Schellman’s practice development efforts. Develop expert knowledge of professional and regulatory standards relevant to assigned service line specializations. Contribute to Schellman’s thought leadership (e.g., articles, webinars, public speaking). Knowledge, Skills, and Abilities Working knowledge of Schellman’s services, methodology, and relevant professional standards. Requisite knowledge of applicable technology and security domains. High level of attention to detail and quality of work product. Client‑service oriented. Excellent time‑management, organizational, verbal, and written communication skills. Ability to work on‑site or remotely as a valuable contributor to a collaborative team. Capable of simultaneously managing assigned tasks for multiple projects. Proficient using Microsoft Word, Excel, PowerPoint, and Schellman’s service delivery applications. Full understanding and application of ethics, independence, and Schellman’s values. Education, Work Experience, and Certifications Bachelor’s degree in accounting, finance, business management, technology, or another relevant subject area, or equivalent years of experience directly related to the duties and responsibilities specified. 2+ years of related professional services experience in information security auditing, assessment, consulting, or compliance focused on ITGC or SOC controls. Ability to work well independently, within a team, and with clients, as well as travel approximately 40–50% (Monday–Thursday). Maintains (preferred) or working toward obtaining at least one certification relevant to Schellman’s services (e.g., CPA, CCSK, or CISA). Equal Opportunity Employment Schellman is an equal‑opportunity employer (EOE) and strongly supports diversity in the workplace; we provide equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law. Schellman uses E‑Verify in our hiring process. Work Environment At Schellman, we strive to provide a flexible and balanced environment and therefore offer the opportunity to work remotely, unless otherwise stated in the job requirements. Connecting, collaborating, and continuous education are highly valued; therefore, we require some travel annually for our Internal Service Delivery roles, which can include in‑person training, team meet‑ups, and strategy meetings. Service Delivery team members will also be required to travel based on business and client needs. #J-18808-Ljbffr Schellman