SOC 2 Assessor

Company Overview

TestPros, established in 1988, is a successful and growing business providing Information Technology (IT) technical support services to a wide range of Commercial and U.S. Federal, State, and Local Government customers. Our capabilities span Program Management, Cyber Security, NIST Compliance, PCI Compliance, SOC 2, GLBA, Zero Trust, Computer Forensics, Software Testing, Accessibility Assessment, Independent Verification and Validation (IV&V), Quality Assurance (QA), Compliance, and Research and Development (R&D) services.

TestPros is an Equal Opportunity Employer.

Position Summary

TestPros is actively seeking an expert-level SOC 2 Assessor with extensive experience in performing SOC 2 Type 2 Assessments. This is a part-time, as-needed position, offered on a 1099 or Corp. to Corp basis, and is entirely remote.

Responsibilities And Duties

• Test and evaluate the operating effectiveness of internal controls against the relevant AICPA Trust Services Criteria (TSC), including: Security (protection against unauthorized access, disclosure, and damage), Availability (ensuring systems are available for operation and use), Processing Integrity (ensuring accurate, complete, and timely data processing), Confidentiality (protecting confidential information), and Privacy (safeguarding personal information).
• Conduct Gap analysis and readiness assessments to identify and document gaps in the organization's existing controls.
• Gather and organize sufficient and appropriate evidence to support audit findings.
• Compile the results of the audit into a detailed SOC 2 Type 2 report.
• Provide recommendations and guidance on remediation and best practices for improving security posture.
• Produce and review key performance indicators (KPIs) for implemented security measures and distribute these KPIs.
• Maintain knowledge of the threat landscape by monitoring threat intelligence and other related sources.

Qualifications And Skills

• 5+ years of directly related experience in IT security compliance, with recent experience specifically in SOC 2.
• Strong background in Cloud computing security.
• Expertise in Security governance and policy.
• Proficiency in Security risk analysis.
• Experience with Threat Intelligence.
• Competency in Incident Management, including analysis, detection, and handling of security events.
• Bachelor's Degree in Computer Science or a related technical discipline, or the equivalent combination of education, professional training, or work experience (preferred).
• Military and/or practical job experience with significant industry certifications may be considered in lieu of formal education.

Key skills/competency

• SOC 2 Type 2 Assessments
• AICPA Trust Services Criteria (TSC)
• IT Security Compliance
• Cloud Computing Security
• Security Governance
• Risk Analysis
• Threat Intelligence
• Incident Management
• Gap Analysis
• Compliance Auditing