SOC Compliance Associate — InfoSec & Audit Readiness

Tevora; Fairfax (VA); On-site; USD 84,000 - 96,000; Full time

Benefits offered by this job

Comprehensive benefits offering

401K with discretionary match

Paid time off and holidays

Job summary

Tevora is seeking an Information Security Associate - Senior Associate to join the SOC Compliance team. This role supports SOC 1 and SOC 2 assessments across a variety of client projects, with exposure to ISO 27001, HITRUST, PCI, and related governance programs.

You will work closely with project leads to communicate findings, develop policy documentation, and contribute to internal process improvements while advancing your information security expertise.

Qualifications

• Knowledge of security policy frameworks and control design.
• Knowledge of security architecture, network, and systems design.
• At least 1 year of experience in information security, IT, enterprise risk or compliance.
• Knowledge of IT security concepts like firewall management, server management, access control, and authentication.
• Ability to translate between technical and business communities; communicate effectively across boundaries.
• Ability to work independently with minimal guidance.
• Proficient in writing executive-level reports and technical documentation.
• Commitment to continued learning.
• Proficient in MS Office tools.
• One professional certification completed or in progress (e.g., CISSP, CCNA, ISO Lead Implementer).

Responsibilities

• Participate in IT and Compliance assessments, audits, gap analyses, and remediation.
• Contribute to SOC 1 & SOC 2 compliance assessments on client projects.
• Communicate with project leads and stakeholders to convey questions and updates.
• Support HITRUST, C5, PCI, or ISO gap assessments.
• Develop customized policies, procedures, and controls for clients.
• Identify policy exceptions and document compensating controls and remediation actions.

Skills

Security policy frameworks

Security architecture

Info security experience

IT security concepts

Client communication

Independent work

Executive writing

MS Office proficiency

Certifications in progress

Education

Bachelor’s degree

Job description

Tevora is seeking an Information Security Associate - Senior Associate to join the SOC Compliance team. This role supports SOC 1 and SOC 2 assessments across a variety of client projects, with exposure to ISO 27001, HITRUST, PCI, and related governance programs.

You will work closely with project leads to communicate findings, develop policy documentation, and contribute to internal process improvements while advancing your information security expertise.