SOC 2 Manager, Audit & Certification, Deloitte Global Technology

Deloitte Canada; Toronto; Hybrid; CAD 85,000 - 156,000; Full time

Job summary

An established industry player is seeking a SOC 2 Manager to lead audits and enhance technology controls. This role involves liaising with external auditors, assessing operational risks, and developing security policies for both on-premises and cloud environments. The ideal candidate will have a strong background in IT audits and risk management, with excellent communication skills. Join a dynamic team that values diversity and offers a flexible work environment, empowering you to grow your career while making a significant impact on clients and communities.

Benefits

Flexible work arrangements

Wellness support

Competitive salary

Diversity and inclusion initiatives

Qualifications

• 5+ years managing IT audits and risk programs.
• Strong understanding of IT controls and cloud security.

Responsibilities

• Lead SOC 2 audits and liaise with external auditors.
• Assess technology risks and recommend controls.
• Communicate effectively with stakeholders.

Skills

IT audits

Risk management

Communication skills

Cloud technologies

Organizational skills

Education

Bachelor’s degree in computer science

Equivalent experience

Tools

NIST

HITRUST

SSAE 18 SOC 2

Job description

Press Tab to Move to Skip to Content Link

Select how often (in days) to receive an alert:

Date: May 5, 2025

Job Type: Permanent
Work Model: Hybrid
Reference code: 129162
Primary Location: Toronto, ON
All Available Locations: Toronto, ON; Edmonton, AB; Halifax, NS; Kitchener, ON; Regina, SK

Our Purpose

At Deloitte, our Purpose is to make an impact that matters. We exist to inspire and help our people, organizations, communities, and countries to thrive by building a better future. Our work underpins a prosperous society where people can find meaning and opportunity. It builds consumer and business confidence, empowers organizations to find imaginative ways of deploying capital, enables fair, trusted, and functioning social and economic institutions, and allows our friends, families, and communities to enjoy the quality of life that comes with a sustainable future. And as the largest 100% Canadian-owned and operated professional services firm in our country, we are proud to work alongside our clients to make a positive impact for all Canadians.

By living our Purpose, we will make an impact that matters.

• Have many careers in one Firm.
• Enjoy flexible, proactive, and practical benefits that foster a culture of well-being and connectedness.
• Learn from deep subject matter experts through mentoring and on-the-job coaching.

--

Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization.

What will your typical day look like?

The SOC 2 Manager, Audit & Certification will perform the following:

• Lead SOC 2 audits and related projects for Deloitte Technology.
• Liaise with SOC 2 external auditors to scope and facilitate SOC 2 audits, gathering and presenting evidence as required to support DT’s SOC 2 audits.
• Understand technology controls, testing of controls, and supporting evidence to meet SOC 2 Trust Service Criteria.
• Understand technology controls that impact on-premises and cloud technology, operational risk to the Deloitte Technology organization, as well as related laws, regulations, and industry standards, specifically related to internal and cloud technology solutions.
• Assess technology and operational risks related to internal and cloud technology solutions, providing input to DT personnel on appropriate controls to address audit risks.
• Recommend policies, standards, procedures, and controls to ensure the confidentiality, integrity, and availability of the information technology environment for on-premises and cloud-hosted IT applications and infrastructure to meet the SOC 2 Trust Service Criteria.
• Manage audit findings; identify and track remediation activities to meet target dates for closure, and track/report progress.
• Work with the appropriate teams to determine the scope of SOC 2 audits.
• Develop and recommend security policies, standards, procedures, checklists, and guidelines tailored to meet organizational requirements for on-premises and cloud IT environments.
• Communicate effectively with DT leadership and stakeholders.
• Make decisions on day-to-day task assignments to the team.
• Participate in continuing education, seminars, and professional organizations to stay current in the field.

About the team

Deloitte Technology supports and protects Deloitte globally through innovative technology development and processes. We operate in a global environment, focusing on 'what can be' to help deliver value to clients and communities.

About you

Do you possess the following?

• Bachelor’s degree in computer science, business administration, information systems, accounting, or equivalent experience.
• Minimum 5 years of related experience managing IT audits, assessments, and risk programs.
• At least 2 years of experience with SSAE 18 SOC 2 and frameworks like NIST, HITRUST, CSA, CCM.
• Experience leading IT audits and SOC reporting activities.
• Strong understanding of IT controls and activities.
• Excellent communication and organizational skills.
• Strong understanding of cloud technologies and security controls.

Total Rewards

The salary range for this position is $85,000 - $156,000, with potential bonus participation. Our Total Rewards Package includes competitive salary, benefits, wellness support, flexible work arrangements, and more.

Our promise to our people: Deloitte is where potential comes to life.

Be yourself, and more. We foster diversity, inclusion, and flexible work options to support your growth and contribution. Lead, develop, and explore new roles within our organization.

The next step is yours. We encourage applications from diverse communities and provide accommodations during the recruitment process. For questions about accessibility or Indigenous careers, contact [e-mail] or [e-mail].

By applying, you will be assessed against Deloitte's global talent standards. We acknowledge the traditional, treaty, and unceded territories of Indigenous Peoples in Canada and commit to reconciliation and sustainability efforts.