Job Description
Job Summary
We are seeking a skilled and detail-oriented SOC2 Consultant to join our team. In this role, you will work with clients to assess, implement, and maintain SOC2 compliance frameworks, ensuring their systems meet the highest security standards, availability, and processing integrity,
confidentiality and privacy standards.
Key Responsibilities
Conduct SOC2 readiness assessments and gap analyses for clients.
Develop and implement SOC2 compliance frameworks, including policies, procedures, and controls.
Collaborate with clients to identify and remediate gaps in their security and compliance posture.
Prepare and review SOC2 documentation, including control narratives, risk assessments, and evidence collection.
Guide clients through SOC2 Type I and Type II audits, working closely with external auditors.
Provide training and support to client teams on SOC2 requirements and best practices.
Stay updated on industry trends, regulatory changes, and emerging threats related to SOC2 and cyber security.
Assist clients in achieving and maintaining compliance with other frameworks (e.g., ISO 27001, GDPR, HIPAA) as needed.
Qualifications
Bachelor's degree in Information Security, Cybersecurity, IT, or a related field.
3 of experience in SOC2 compliance, cybersecurity, or IT auditing.
Strong understanding of SOC2 Trust Service Criteria (TSC) and audit processes.
Experience with risk management, control implementation, and evidence collection.
Familiarity with cloud platforms (e.g., AWS, Azure, GCP) and their security controls.
Excellent communication and client-facing skills.
Relevant certifications such as CISA, CISSP, or SOC2-specific training are a plus.
Ability to manage multiple projects and deadlines effectively.
