Remote SOC 2 Assessor Consultant (Type 2)

TestPros; United States; Remote; USD 69,000 - 124,000; Full time

Job summary

TestPros is seeking an expert-level SOC 2 Auditor to support SOC 2 Type 2 assessments for government and commercial clients on a remote, project-based basis. You will test internal controls against the Trust Services Criteria with a focus on security, availability, processing integrity, confidentiality and privacy.

Responsibilities include gap analyses, gathering evidence, compiling the SOC 2 Type 2 report, and delivering remediation guidance.

Qualifications

• 5+ years IT security compliance experience, including SOC 2.
• Cloud computing security.
• Security governance and policy.
• Security risk analysis.
• Threat intelligence.
• Incident management and security event handling.
• Bachelor's degree in CS or related field, or equivalent experience.
• Military experience may substitute education with industry certifications.

Responsibilities

• Test and evaluate the operating effectiveness of internal controls against TSC, including security, availability, processing integrity, confidentiality and privacy.
• Conduct gap analyses and readiness assessments.
• Gather and organize evidence to support findings.
• Compile the SOC 2 Type 2 report.
• Provide remediation guidance and best practices for security posture.
• Produce and review KPIs for security measures.
• Maintain knowledge of threat landscape via threat intelligence sources.

Skills

SOC 2

IT security

Cloud security

Security governance

Security risk analysis

Threat intelligence

Incident management

Education

Bachelor's degree in CS or related

Certifications/experience in lieu of degree

Job description

TestPros is seeking an expert-level SOC 2 Auditor to support SOC 2 Type 2 assessments for government and commercial clients on a remote, project-based basis. You will test internal controls against the Trust Services Criteria with a focus on security, availability, processing integrity, confidentiality and privacy.

Responsibilities include gap analyses, gathering evidence, compiling the SOC 2 Type 2 report, and delivering remediation guidance.