SOC I & II Type I Specialist - Compliance Management

Summary:
We are seeking an experienced and highly motivated Compliance Officer with a strong background in SOC I and SOC II Type I audits. You will play a crucial role in ensuring that our organization meets the highest standards of security, privacy, and regulatory compliance. You will be responsible for maintaining and enhancing our compliance programs, conducting risk assessments, and leading SOC audits.

The ideal candidate will have a thorough understanding of SOC compliance frameworks, information security, and regulatory requirements to drive our e-orts in safeguarding sensitive data.

Key Responsibilities:

1. SOC I & II Audits:

• Lead the planning, execution, and management of SOC I and SOC II Type I audits.
• Collaborate with external auditors, internal departments, and stakeholders to ensure audits are conducted smoothly and all compliance gaps are addressed.
• Prepare and present audit reports to senior management, outlining findings, risks, and remediation plans.
• Maintain up-to-date knowledge of SOC auditing standards and procedures, ensuring the organization remains compliant.

2. Compliance Management:

• Develop, implement, and maintain comprehensive compliance programs to ensure alignment with SOC I & II standards.
• Conduct internal assessments to evaluate compliance with SOC frameworks and address any deficiencies.
• Work cross-functionally with IT, HR, and Legal teams to ensure compliance across all business operations.
• Act as the primary point of contact for compliance inquiries, audits, and regulatory matters.

3. Risk Assessment & Mitigation:

• Identify, assess, and document potential risks related to security, operations, and compliance.
• Implement risk mitigation strategies and corrective action plans to address audit findings or compliance gaps.
• Monitor and evaluate the effectiveness of risk controls, making recommendations for continuous improvement.

4. Policies and Procedures:

• Develop, review, and update compliance policies and procedures to meet SOC I & II requirements and other applicable regulations.
• Ensure that all staff, particularly those in IT and security, are trained on compliance policies and standards.
• Provide clear guidance on how to comply with regulatory requirements and industry best practices
• Establish continuous monitoring mechanisms to ensure compliance with SOC I & II Type I controls.
• Develop dashboards and reporting tools to provide insights into compliance metrics and performance.
• Report on key compliance indicators, trends, and emerging risks to senior leadership.

Qualifications:

• Bachelor s degree in Information Security, Business Administration, or a related field (Master s degree preferred).
• 5+ years of experience in compliance management, with a specific focus on SOC I and SOC II Type I audits.
• Deep understanding of SOC 1/SSAE 18 and SOC 2/AT-C 105 standards, as well as regulatory requirements such as GDPR, HIPAA, and ISO 27001.
• Strong experience in risk assessment, auditing, and remediation of compliance issues.
• Proven ability to lead cross-functional teams and manage external audit engagements.
• Certification in relevant compliance and auditing disciplines (e.g., CISA, CISM, CISSP, CRISC) is a plus.

Preferred Skills:

• Experience working with cloud environments (e.g., AWS, Azure) and understanding how to apply SOC standards to cloud infrastructure.
• Familiarity with GRC tools (Governance, Risk, and Compliance) to track and manage compliance requirements.
• Experience in developing compliance frameworks for organizations that process large volumes of sensitive data.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.