Remote Security Compliance Consultant - SOC 2 & PCI Expert

Embedded Shishya; United States; Remote; USD 207,000 - 317,000; Full time

Job summary

Invadel, a New York City penetration testing firm, seeks a security compliance professional for contract engagements across SOC 2 and related standards. You will map requirements, verify scope against controls, and prepare attestation materials.

This remote US-based role is paid per engagement, with typical engagements lasting one to three days plus occasional readiness reviews. Strong writing for auditors and engineers is essential.

Qualifications

• Four or more years in security compliance, audit or GRC with direct experience of SOC 2 and at least one of PCI DSS, HIPAA, ISO 27001, NYDFS 500 or CMMC.
• Enough technical grounding to read a penetration test finding and explain what it means for a control.
• Clear writing for auditors, executives and engineers.
• Based in the United States with authorization to work here.
• Two professional references.

Responsibilities

• Produce the framework mapping section of each report and the attestation letter.
• Review client scope against the requirement driving the test and flag gaps before testing starts.
• Answer auditor and customer security questionnaire follow-ups with the client.
• Run readiness reviews for clients preparing for SOC 2 Type II or PCI DSS assessment.
• Keep the compliance mapping templates current.

Skills

SOC 2

PCI DSS

HIPAA

ISO 27001

NYDFS 500

CMMC

Audit & GRC

Written communication

Job description

Invadel, a New York City penetration testing firm, seeks a security compliance professional for contract engagements across SOC 2 and related standards. You will map requirements, verify scope against controls, and prepare attestation materials.

This remote US-based role is paid per engagement, with typical engagements lasting one to three days plus occasional readiness reviews. Strong writing for auditors and engineers is essential.