Schellman supports Associates with hands-on project execution, close supervision, and clear career guidance through assigned leadership. In this remote role, you will perform penetration testing work that supports clients across multiple service lines, with opportunities to deepen your knowledge of professional and regulatory standards relevant to your specialization(s).

What you’ll do

Execute assigned testing procedures, perform detailed analysis, and reach conclusions
Document results in accordance with company standards and, where applicable, suggest improvement ideas
Comply with Schellman’s code of ethics and professional conduct, along with applicable methodologies, policies, and procedures
Adhere to professional and regulatory standards relevant to the assigned service line specialization(s)
Maintain effective rapport with client personnel and serve as a contact for clients’ basic engagement questions
Manage client expectations to ensure outcomes meet or exceed expectations
Complete assigned duties on time with a high attention to detail
Collaborate with project team members throughout the project life cycle, including following project schedules and keeping others updated on task progress
Escalate issues internally in a proper and timely manner
Use discretion and decorum in the timing, form, and content of client communications
Attend project kick-off and closing meetings
Contribute to Schellman’s practice development efforts and build expert knowledge of applicable standards
Book travel reservations in a timely manner in accordance with Schellman’s travel and expense policies and procedures
When qualified and called upon, perform the essential functions of other service delivery positions

How the role is structured

Associates are primarily responsible for hands-on project execution. Work is not typically dedicated to one specific service line, and Associates may participate in a variety of project types, including SOC 1, SOC 2, PCI, ISO, and Cloud Security, among others. Associates are assigned to a specific service delivery principal responsible for supervising career development, while day-to-day activities are closely supervised by the management teams of assigned projects. Associates typically have no responsibility for supervising others.

Remote work, travel, and expectations

Remote opportunity, unless otherwise stated in the job requirements
Approximately 20% travel annually for Operations roles, which may include in-person training, team meet-ups, and strategy meetings
Service delivery team members may also be required to travel based on business and client needs

Requirements

Bachelor’s degree in accounting, finance, business management, technology, or another relevant subject area, or equivalent years of experience directly related to the duties and responsibilities
Actively pursuing or maintaining at least one relevant certification (examples include CPA, CISA, CISSP, AQSA, QSA, OSCP, etc.)
Familiarity with Schellman’s services, methodology, and relevant professional standards
Requisite knowledge of applicable technology and security domains
High level of attention to detail and quality of work product
Client service oriented approach
Excellent time management, organizational, and verbal and written communication skills
Ability to work on-site or remotely as a valuable contributor to a collaborative team
Capability to simultaneously manage assigned tasks for multiple projects
Proficiency using Microsoft Word, Microsoft Excel, and PowerPoint, as well as Schellman’s service delivery applications
Full understanding and application of ethics, independence, and Schellman’s values

Tools you’ll use

Microsoft Word, Microsoft Excel, PowerPoint

Promotion consideration (what helps)

Respected by peers and superiors as evidenced by appraisals
Consistently goes above and beyond assigned responsibilities for the betterment of Schellman
Completed at least one year at Schellman or relevant professional services experience in areas including financial auditing, operational auditing, information systems auditing, internal auditing, information security management, consulting, and/or risk consulting (including years of service at Schellman)
Consistently exceeds expectations in essential functions for the current position
Demonstrates mastery of the knowledge, skills, and abilities required for the current position
Maintains at least one relevant certification (examples include CPA, CISA, CISSP, AQSA, QSA, OSCP, etc.)

Penetration Tester