SOC 2 Type II

About the Role:

SOC 2 Type II Audit Support Specialist

Key Responsibilities:

Act as the primary point of contact for external auditors during the SOC 2 Type II audit process.

Coordinate the collection, review, and delivery of audit evidence across departments.

Maintain and track control ownership, testing procedures, and remediation plans.

Support the implementation and monitoring of internal controls and policies aligned with SOC 2requirements.

Assist with risk assessments and gap analyses, and document remediation efforts.

Maintain detailed documentation to support continuous compliance initiatives.

Help prepare and update security policies, procedures, and standards in line with auditrequirements.

Provide ongoing education and awareness to staff regarding SOC 2 controls and compliance best practices.

Monitor compliance tools (e.g., Vanta, Drata, Tugboat, etc.) and ensure systems stay in sync withrequirements.

Collaborate with internal stakeholders to remediate audit findings and control deficiencies.

Requirements:

Bachelors degree in Information Systems, Cybersecurity, Compliance, or related field.

4+ years of experience in audit support, IT compliance, or security operations (SOC 2 experience preferred).

Familiarity with frameworks like SOC 2, ISO 27001, NIST, or HIPAA.

Strong project management and organizational skills.

Excellent written and verbal communication skills.

Experience working with GRC or compliance automation tools

Understanding of cloud environments (AWS, Azure, GCP) and related security practices is a plus.

Preferred Qualifications:

Prior involvement in a successful SOC 2 Type II audit.

CISA, CISSP, or similar certifications a plus.

Experience with SaaS environments and third-party vendor risk management.