Security for non-SOAP/REST data transfer

I am tasked with writing a listener for an Http POST from another business.  The POST will contain sensitive data in an XML stream.
Besides an SSL connection, is one-to-one client certificate mapping a good authentication technique to use?
In addition, I would have a dedicated app for the listener, with Authentication and Role Authorization in web.config.