Ideal Candidate
• Knowledge of attestation reporting frameworks (ISAE3000, ISAE3402 and AICPA SOC1 (SSAE18) and SOC2 Trust Service Criteria) with an emphasis on testing requirements, auditing in financial services, and basic accounting principles.
• Experience supporting all stages of attestation engagements including planning, risk assessments, walkthroughs, controls testing, evaluation of deficiencies and preparation of draft assurance reports.
•Oversee the development and review of key deliverables (system description review support, control testing documentation, results, exceptions evaluation, and final reports).
•Drive quality and provide technical leadership: coach teams on professional judgment, documentation discipline, and consistent application of criteria and testing approaches
•Manage multiple concurrent engagements in a fast paced environment, budgets, and utilisation; build and motivate high-performing teams; conduct coaching and performance reviews.
• Proven experience in auditing business processes, transaction-level controls and or IT related controls (Including ITGCs)within financial services or similar industries, with a focus on financial reporting risks, either in the context of SOC 1 / ISAE 3402 engagements or internal audits.
• Demonstrated ability to leverage AI-enabled tools (e.g., Microsoft Copilot, ChatGPT Enterprise, data analytics and automation platforms) to improve audit quality, testing efficiency, documentation and knowledge management.
• Demonstrated ability to engage with senior client stakeholders, control owners and external auditors to obtain evidence, evaluate controls and communicate observations effectively.
• Have excellent communication and written reporting skills and an ability to set own high standards of performance and delivering desired results.
• Be an enthusiastic self-starter that has excellent analytical skills with the ability to identify and analyse problems, propose potential improvements to clients.
• Experience of working to deadlines, ability to multitask and work in a fast paced environment.
Experience/ Qualifications
• 7 -10+ years’ direct delivery experience in audit, risk advisory or attestation services, in practice or industry
• Possesses good working knowledge / understanding of ISAE3402, SSAE18 and/or SOC2 Trust Service Criteria
• Degree in Accounting, Information systems or related field
• Good level of IT literacy with a track record of using AI (CoPilot etc.) / automated controls testing tools as well as knowledge of the full MS Office suite
•CPA, ACA, ACCA, CISA, CISSP, CRISC or equivalent professional certification preferred.
Skills Required
- 7–10+ years of direct delivery experience in audit, risk advisory, or attestation services
- Working knowledge of ISAE 3402, SSAE 18, and/or SOC 2 Trust Service Criteria
- Experience supporting the full attestation engagement lifecycle, including planning, risk assessment, walkthroughs, controls testing, deficiency evaluation, and assurance reporting
- Experience auditing business processes, transaction-level controls, and/or IT-related controls, including ITGCs
- Experience auditing financial reporting risks in financial services or similar industries
- Degree in Accounting, Information Systems, or a related field
- Good IT literacy and experience using AI tools, automated controls testing tools, data analytics, and the Microsoft Office suite
- Excellent communication, analytical, reporting, stakeholder engagement, and problem-solving skills
- CPA, ACA, ACCA, CISA, CISSP, CRISC, or equivalent professional certification
What We Do
Grant Thornton Gibraltar is a leading professional services firm established in 1995. It serves private individuals and public companies listed on international stock exchanges, with experienced teams supporting local and international clients. Its offerings include audit and assurance, business services, payroll, advisory, tax, accounting, and financial services. The firm also helps organizations grow and develop by addressing their accountancy and business needs.
