SOC Compliance Associate (SOC 1/2) – InfoSec

Tevora; Irvine (CA); On-site; USD 85,000 - 120,000; Full time

Benefits offered by this job

Comprehensive benefits

PTO and holidays

401K with match

Vibrant culture

Job summary

Tevora is seeking an Information Security Associate - Senior Associate to join our SOC Compliance team in Irvine, CA or Fairfax, VA. The role supports SOC 1 and SOC 2 assessments and may involve ISO 27001, HITRUST, PCI, and other frameworks.

You will develop policies, participate in audits, and communicate clearly with project stakeholders. The ideal candidate has 1+ year in information security or compliance, strong reporting skills, and professional certifications such as Sec+, CCNA, or ISO

Qualifications

• Minimum 1 year of experience in information security, IT, or compliance fields.
• Knowledge of firewall, server management, access control and authentication concepts.
• Ability to translate technical concepts for business stakeholders.

Responsibilities

• Participate in IT and Compliance assessments, audits, gap analyses, and remediation.
• Contribute to SOC 1 & SOC 2 compliance assessments across client projects.
• Communicate with project leads and stakeholders on requirements and updates.
• Support HITRUST, C5, PCI, ISO gap assessments and other frameworks.
• Develop policies, procedures, controls, and disaster recovery documents.
• Identify exceptions and document compensating controls and remediation steps.
• Draft executive-level reports and technical documentation.
• Continuously learn and apply security policy frameworks.

Skills

SOC 1 Audits

SOC 2 Audits

Policy Documentation

Executive Reporting

Communication

Independent Work

Security Frameworks

MS Office

Education

Bachelor's degree

CPA license (preferred)

Job description

Tevora is seeking an Information Security Associate - Senior Associate to join our SOC Compliance team in Irvine, CA or Fairfax, VA. The role supports SOC 1 and SOC 2 assessments and may involve ISO 27001, HITRUST, PCI, and other frameworks.

You will develop policies, participate in audits, and communicate clearly with project stakeholders. The ideal candidate has 1+ year in information security or compliance, strong reporting skills, and professional certifications such as Sec+, CCNA, or ISO