SOC 2 Type II

We are currently looking for SOC 2 Type II resources.

PFB JD and additional details for your reference and share the profiles accordingly.

Additional Details:

1. Contract duration- 3 months

2. Work type- Remote/ Pune (Hybrid)

3. Experience - 4 years

About the Role:
We are seeking a detail-oriented and process-driven SOC 2 Type II Audit Support Specialist to join our Compliance team. In this role you will play a key part in preparing executing and maintaining the controls necessary to support our SOC 2 Type II audit efforts. You'll collaborate cross-functionally with teams across IT Security Legal and Engineering to ensure all processes align with SOC 2 trust principles—Security Availability Confidentiality Processing Integrity and Privacy.

Key Responsibilities:
Act as the primary point of contact for external auditors during the SOC 2 Type II audit process.
Coordinate the collection review and delivery of audit evidence across departments.
Maintain and track control ownership testing procedures and remediation plans.
Support the implementation and monitoring of internal controls and policies aligned with SOC 2 requirements.
Assist with risk assessments and gap analyses and document remediation efforts.
Maintain detailed documentation to support continuous compliance initiatives.
Help prepare and update security policies procedures and standards in line with audit requirements.
Provide ongoing education and awareness to staff regarding SOC 2 controls and compliance best practices.
Monitor compliance tools (e.g. Vanta Drata Tugboat etc.) and ensure systems stay in sync with requirements.
Collaborate with internal stakeholders to remediate audit findings and control deficiencies.

Requirements:
Bachelor’s degree in Information Systems Cybersecurity Compliance or related field.
4 years of experience in audit support IT compliance or security operations (SOC 2 experience preferred).
Familiarity with frameworks like SOC 2 ISO 27001 NIST or HIPAA.
Strong project management and organizational skills.
Excellent written and verbal communication skills.
Experience working with GRC or compliance automation tools
Understanding of cloud environments (AWS Azure GCP) and related security practices is a plus.

Preferred Qualifications:
Prior involvement in a successful SOC 2 Type II audit.
CISA CISSP or similar certifications a plus.
Experience with SaaS environments and third-party vendor risk management.