Provides administrative support for SOC 1 and SOC 2 compliance engagements, manages data administration responsibilities, and coordinates quarterly access review processes to ensure accurate compliance records and efficient fulfillment of regulatory requirements. The position requires exceptional organizational skills, meticulous attention to detail, and the ability to effectively coordinate multiple compliance initiatives and collaborate with diverse stakeholder groups.
Key Responsibilities
SOC Administrative and Engagement Support
Provide comprehensive administrative support for SOC 1 Type I/II and SOC 2 Type I/II compliance engagements, serving as the central coordination point for all engagement activities including:
- Coordinate complex audit schedules across multiple business units and locations.
- Proactively arrange walkthroughs with process owners and key personnel to ensure audit procedures align with business priorities and minimize operational disruption.
- Manage and track audit requests and evidence collection through established protocols, including submission deadlines, follow-ups, and maintaining detailed logs of evidence status to ensure complete documentation packages.
- Oversee collection and validation of population and sample evidence by collaborating with IT, system administrators, and business process owners to obtain and verify required data and supporting documentation for SOC compliance testing.
- Run population and sample reports from various business systems and applications to support control testing activities, ensuring evidence meets auditor requirements for reliability and completeness.
- Escalate complex questions or issues from control owners to appropriate managers or senior team members to ensure timely resolution.
- Organize and maintain comprehensive audit documentation libraries, ensuring proper filing, version control, and accessibility of all engagement materials.
- Monitor engagement progress against established milestones, identify potential scheduling conflicts or resource constraints, and implement solutions to prevent delays.
- Prepare detailed status reports for management, highlighting progress, issues, and upcoming milestones to support informed decision-making.
Quarterly Access Review Management
- Administer the quarterly user access reviews, including configuration of review parameters, user assignments, and approval workflows.
- Maintain master data (organizational hierarchies, system inventories, reviewer assignments) to ensure accurate review scope and distribution.
- Coordinate and facilitate quarterly user access reviews across multiple enterprise systems by distributing assignments, notifications, and clear instructions to stakeholders.
- Collect and post system-generated user access reports for control owner review, rerun reports as needed, and support process discussions and next steps.
- Monitor review progress, proactively address delays, and track completion against project timelines.
- Serve as the primary point of contact for reviewers, system owners, and business unit managers, providing training and guidance as needed.
- Escalate complex access questions, unusual findings, or policy issues to management or senior team members for timely resolution.
- Organize and archive reviewer certifications, access modification requests, remediation activities, and supporting evidence for each review cycle.
- Manage the remediation process for access exceptions, follow up on outstanding items, and ensure proper documentation of corrective actions.
- Prepare and maintain status reports and dashboards tracking review completion, exceptions, and remediation for management and external auditors.
Control Testing Database Administration
- Serve as administrator for control testing software platform, managing user access, system functionality, and data integrity. Configure testing workflows, user permissions, and reporting parameters within control testing environments.
- Maintain master data including control matrices, testing procedures, and organizational hierarchies.
- Assist with database queries, reports, and dashboards to support audit engagement needs. Ensure data accuracy and consistency across testing cycles and engagements.
- Provide administrative and technical support to audit team members using control testing tools, including basic troubleshooting and user guidance.
- Coordinate with IT teams regarding system updates and maintenance. Maintain system documentation including user guides, procedures, and configuration records. Support quality control procedures for data entry and documentation.
Required Qualifications
Education and Experience Associate's degree in Business Administration, Accounting, Information Systems, or related field. Bachelor's degree preferred. Minimum 2-3 years of administrative experience in audit, compliance, or professional services environment. Previous exposure to SOC engagements or audit support roles preferred.
Technical Skills Proficiency in Microsoft Office Suite, particularly Excel for data management and reporting. Experience with audit software applications or database management systems preferred. Strong computer skills with ability to learn new software platforms quickly. Understanding of document management systems and file organization principles.
Administrative Competencies Excellent organizational and time management skills with ability to prioritize multiple tasks and deadlines. Strong attention to detail in documentation, data entry, and quality control activities. Superior written and verbal communication skills for professional correspondence and stakeholder interaction.
Preferred Qualifications
Experience with cloud-based platforms and SaaS applications. Background in professional services, financial services, or regulated industries. Project coordination experience with demonstrated ability to support multiple concurrent engagements. Familiarity with compliance frameworks or audit methodology.
Key Competencies
Organizational Excellence Exceptional organizational skills with systematic approach to task management and file organization. Strong attention to detail in all administrative functions, data management, and quality control activities. Ability to maintain accuracy while managing high-volume workloads and tight deadlines.
Communication and Coordination Professional communication skills for interacting with clients, auditors, and internal stakeholders. Ability to coordinate effectively across multiple teams and business units. Strong interpersonal skills for building productive working relationships and managing stakeholder expectations.
Technical Aptitude Comfortable working with various software applications and database systems. Quick learner with ability to adapt to new technologies and tools. Problem-solving skills for resolving administrative challenges and process improvements.
Professional Standards Understanding of confidentiality requirements and professional standards in audit environments. Commitment to maintaining data privacy and client confidentiality. Reliability and professionalism in all client-facing and internal interactions.
