Responsibilities

● Assess SOC2 scope impact due to merger/integration

● Update SOC2 controls to reflect new infrastructure & processes

● Identify compliance gaps and remediation actions

● Maintain SOC2 Type 2 certification

● Prepare audit evidence & compliance documentation

● Coordinate with auditors and internal teams

● Implement continuous compliance controls

● Train teams on updated security procedures

● Prepare compliance reports for stakeholders

Required Skills

● Strong experience with SOC2 Type 1 & Type 2 audits

● Knowledge of Trust Services Criteria (TSC)

● Experience with GRC tools (Vanta, Drata, Secureframe, ServiceNow GRC)

● Knowledge of ISO 27001, NIST, CIS Controls

● Security controls: access management, incident response, monitoring

● Strong documentation & stakeholder communication skills

Qualifications

● Bachelor’s degree in Computer Engineering ...