SOC 2 Type II Specialist

JR United Kingdom; Portsmouth; Remote; GBP 80,000 - 100,000; Full time

Job summary

Une entreprise recherche un expert SOC 2 Type II pour un projet à distance de 6 mois. Le candidat idéal possède une expérience approfondie des cadres SOC 2 avec des compétences en ISO 27001 et IT GRC pour aider à la préparation d'audit. Les responsabilités incluent la documentation des contrôles, l'analyse des lacunes et la collaboration avec des équipes multifonctionnelles pour garantir la conformité SOC 2.

Qualifications

• Expérience pratique dans les cadres SOC 2 et ISO 27001.
• Expérience dans la collaboration avec des équipes diverses.
• Antécédents en informatique, sciences de la vie ou domaines similaires.

Responsibilities

• Diriger l'implémentation et guider vers l'accréditation SOC 2.
• Évaluer les exigences et effectuer des analyses de lacunes.
• Documenter et améliorer les politiques informatiques et de sécurité.

Skills

SOC 2 frameworks

ISO 27001

IT GRC

GxP compliance

SaaS/cloud environments

Risk assessments

Internal audits

AICPA Trust Services Criteria

Education

Degree in InfoSec, IT, or Life Sciences

Job description

Social network you want to login/join with:

col-narrow-left

Client:

Location:

portsmouth, hampshire, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

5

Posted:

31.05.2025

Expiry Date:

15.07.2025

col-wide

Job Description:

**6 Month FTC, Fully Remote**

I'm looking for a SOC 2 Type II expert to take the lead on a critical project for one of my clients, guiding them through the full journey of achieving SOC 2 Type II accreditation.

This role is all about SOC 2 Type II. You’ll be the go-to person driving the implementation, ensuring they are audit-ready, and helping them embed SOC 2 best practices.

I would ideally like someone with deep, hands-on experience in SOC 2 frameworks, someone who’s been through this before and knows what it takes. Familiarity with ISO 27001, IT GRC, GxP compliance, and SaaS/cloud environments is also important, but SOC 2 is the headline act here.

You’ll collaborate closely with teams across the company, from InfoSec and Engineering to QA, IT, Compliance, and Transformation. Assessing where they are now, identifying what needs to change, and leading the charge to get fully aligned with SOC 2 requirements and ready for a successful audit.

Key Points

• Work closely with teams across the business to define, set up, and document controls that meet SOC 2 and GxP standards.
• Run a gap analysis to ascertain what needs to be done
• Write, review, and improve IT and security policies to ensure Audit readiness
• Help run risk assessments, internal audits, and follow-up on any fixes or improvements.
• Partner with external auditors and vendors to get audits done smoothly and make sure our controls are working as intended.
• Solid experience leading or being a key part of SOC 2 and ISO 27001 implementation efforts.
• Strong knowledge of the AICPA Trust Services Criteria and the kinds of IT/security controls that support them.
• A background in InfoSec, IT, Life Sciences, or something similar — a degree in one of these areas is a plus.
• Bonus points if you’ve worked in pharma, biotech, or health tech and helped companies meet both SOC 2 and GxP requirements.

This is fully remote, and would be based on a pro-rata salary of £75,000-80,000 for the 6 month period.

Please do get in touch if this is something that sounds interesting.