Job Description
Responsibilities
● Assess SOC2 scope impact due to merger/integration
● Update SOC2 controls to reflect new infrastructure & processes
● Identify compliance gaps and remediation actions
● Maintain SOC2 Type 2 certification
● Prepare audit evidence & compliance documentation
● Coordinate with auditors and internal teams
● Implement continuous compliance controls
● Train teams on updated security procedures
● Prepare compliance reports for stakeholders
Required Skills
● Strong experience with SOC2 Type 1 & Type 2 audits
● Knowledge of Trust Services Criteria (TSC)
● Experience with GRC tools (Vanta, Drata, Secureframe, ServiceNow GRC)
● Knowledge of ISO 27001, NIST, CIS Controls
● Security controls: access management, incident response, monitoring
● Strong documentation & stakeholder communication skills
Qualifications
● Bachelor’s degree in Computer Engineering ...