SOC 2 Assessor

TestPros; United States; Remote; USD 69,000 - 124,000; Full time

Job summary

TestPros is seeking an expert-level SOC 2 Auditor to support SOC 2 Type 2 assessments for government and commercial clients on a remote, project-based basis. You will test internal controls against the Trust Services Criteria with a focus on security, availability, processing integrity, confidentiality and privacy.

Responsibilities include gap analyses, gathering evidence, compiling the SOC 2 Type 2 report, and delivering remediation guidance.

Qualifications

• 5+ years IT security compliance experience, including SOC 2.
• Cloud computing security.
• Security governance and policy.
• Security risk analysis.
• Threat intelligence.
• Incident management and security event handling.
• Bachelor's degree in CS or related field, or equivalent experience.
• Military experience may substitute education with industry certifications.

Responsibilities

• Test and evaluate the operating effectiveness of internal controls against TSC, including security, availability, processing integrity, confidentiality and privacy.
• Conduct gap analyses and readiness assessments.
• Gather and organize evidence to support findings.
• Compile the SOC 2 Type 2 report.
• Provide remediation guidance and best practices for security posture.
• Produce and review KPIs for security measures.
• Maintain knowledge of threat landscape via threat intelligence sources.

Skills

SOC 2

IT security

Cloud security

Security governance

Security risk analysis

Threat intelligence

Incident management

Education

Bachelor's degree in CS or related

Certifications/experience in lieu of degree

Job description

TestPros delivers innovative independent IT assessment solutions to critical challenges facing the nation and the world. We support the U.S. Federal Government and Commercial clients within the continental USA.TestPros is dedicated to making lives better, safer and more secure. TestPros is looking for Expert level SOC 2 Auditorswith experience performing SOC 2 Type 2 Assessments. PositionType:Consultant (Project-Based) Location:Remote Start:Future projects late 2026 or 2027(not an immediate job opening)

Overview

Responsibilities and Duties: You should be able to deliver on the following expertly and consistently:

• Test and evaluate the operating effectiveness of internal controls against the relevant AICPA Trust Services Criteria (TSC), including:

  • Security: Protection against unauthorized access, disclosure, and damage.

  • Availability: Ensuring systems are available for operation and use.

  • Processing Integrity: Ensuring accurate, complete, and timely data processing.

  • Confidentiality: Protecting confidential information.

  • Privacy: Safeguarding personal information.

• Conduct Gap analysis and readiness assessments to identify and document gaps in the organization's existing controls.

• Gather and organize sufficient and appropriate evidence to support the findings.

• Compile the results of the audit into a detailed SOC 2 Type 2 report.

• Provide recommendations and guidance on remediation and best practices for improving security posture.

• Produce and review key performance indicators for implemented security measures and distribute KPIs.

• Maintain knowledge of threat landscape by monitoring threat intelligence, and other related sources.

Qualifications and Skills:

• 5+ years of directly related experience in IT security compliance, including recent experience with SOC 2

• Cloud computing security

• Security governance and policy

• Security risk analysis

• Threat Intelligence

• Incident Management - analysis, detection, and handling of security events

• Bachelor's Degree in Computer Science or a related technical discipline, or the equivalent combination of education, professional training, or work experience (preferred)

• Military and/or practical job experience may be considered in-lieu of formal education, with significant industry certifications

Rate: $50-90/hr (1099 or Corp. To Corp.). This rangerepresentsagood-faithestimate and is not a guarantee; final compensation isdeterminedby factors such as experience, qualifications, and government contract labor rate requirements and may fall outside the stated range. Equal Opportunity Employer TestPros is an equal-opportunity employer and does not discriminate in employment based on race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service, or any other non-merit factor. Offer Considerations TestPros considers several factors when extending an offer, including but not limited to, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, geographic location, education, and certifications. Federal Compliance As a federal contractor, TestPros is subject to all federal and state mandates and/or other customer requirements.