Attestation Manager

The organisation

Our client is the global information protection group of a network of independent member firms offering audit, tax and advisory services. The member firms can be found in 152 countries and territories and work closely with clients, helping them to mitigate risks and grasp opportunities. Collectively they employ 200,000 people across a range of disciplines. Sustaining and enhancing the quality of this professional workforce is a primary objective of our client.

The position

As the Attestation / SOC2 Manager you will provide attestation support to a global IT services group related to producing attestation - System and Organization Controls (SOC) 2 Type 2 - reports, particularly for entity level and IT controls. In addition, the successful candidate will complete general information protection and IT controls attestation activities, including supporting business areas in interpretation of SOC2 frameworks, control design, support of internal and external audits, responding to audit findings, process improvements, remediation and other activities to manage and extend the control environment.

You will work closely with technology and business stakeholders to clarify attestation requirements and drive implementation of process improvements and provide leading practices guidance to SOC2 report owners in appropriately developing and maintaining SOC2 reports, particularly as attestation standards change. You will also help enhance the Global SOC2 attestation program and perform analysis of SOC2 report results to improve efficiencies year over year.

Candidate profile

For this role we are looking for someone with a Bachelor’s degree preferably in Computer Science, Computer Engineering or Information Security. You have a minimum of 4 to 6 years experience, with at least 4 years of information protection assessment and attestation - System and Organization Controls (SOC) 2 - experience within a corporate environment (global companies preferred). You have strong experience performing System and Organization Controls (SOC) 2 Type 2 and equivalent attestation work, internal or external data and technology audits, including supervisory experience.

Together with that you have very good knowledge of System and Organization Controls (SOC) 2 Type 2 (SSAE 18) attestation standards, reporting requirements and audit procedures. A professional information security audit/assessment, information security management or privacy qualification is preferred, such as CISA, CISM, CISSP, CIPP or ISO 27001. You have preferably experience and good understanding in performing audits to ISO27001 and other relevant standards.

Also, you hold a valid passport and you are able to travel periodically on business assignments. For this role you are fluent in English. Spoken other languages - such as Spanish, French, German or Mandarin - is a plus. You have methodical approach to work, pay attention to detail and deliver high quality results. You are capable of critical thinking and executing plans into action. You are a good communicator with strong presentation skills who can comfortable present to the senior management. Also, you are experienced in working in multi-cultural environments and sensitive to different business cultures. Furthermore, you have the strong ability to multi-task. You can work independently within a global team. Low (no more than 20%) travel time (typically well planned in advance) is part of this job.

The offer

An excellent package of primary and secondary employment conditions based on the latest developments in the market. Beside, ample opportunities for personal development and growth within the global organization. With the targeted training, education and coaching, the company helps the employees excel and excel at work.

Interested?

If you're interested in this role, click the link below to forward an up-to-date copy of your CV, or call us now.