[Remote] Senior Consultant, IT Audit and SOC2

Note: The job is a remote job and is open to candidates in USA. CyberGuard Advantage is hiring a Senior Consultant to execute SOC 1, SOC 2, SOC 3, and other AICPA attestation engagements. The role leads complex engagements from planning through reporting and closure, supports assessments across multiple security and compliance frameworks, and develops junior engagement leads.

Responsibilities

• Provides engagement-level guidance as assigned
• Develop engagement scope and testing plans, evaluate complex controls, and assess exceptions under applicable AICPA standards and firm methodology
• Assess client environments against AICPA Trust Services Criteria, NIST CSF, the ISO 27000 series, HITRUST CSF, PCI DSS, and HIPAA; tailor testing and conduct readiness assessments
• Review Associate and assigned Consultant workpapers for accuracy, sufficient evidence, and supported conclusions
• Manage day-to-day client relationships, lead status meetings, communicate findings, and resolve routine delivery issues
• Coordinate team assignments and review schedules, monitor budgets and deadlines, and provide regular written status reports and completion forecasts
• Prepare complete draft SOC and other attestation reports and resolve review comments through finalization
• Escalate significant technical issues, scope changes, and resource needs to management with recommendations
• Coach Associates and Consultants to lead engagements and support the transfer of suitable assignments
• Maintain technical knowledge and improve firm methodology, templates, and training

Skills

• Bachelor's degree in accounting, information systems, cybersecurity, or a related field, or equivalent relevant experience
• Typically 3–6 years of total relevant experience in IT audit, assurance, risk, or compliance
• Familiarity with multiple information security and compliance frameworks, such as ISO 27001, CIS Controls, NIST CSF, HIPAA, and HITRUST
• Experience leading more-complex SOC or other AICPA attestation engagements and independently applying an additional relevant framework in testing or readiness assessments
• Working knowledge of IT risks, control design and operating effectiveness, audit evidence, and testing methods
• Demonstrated ability to produce complete, review-ready files and draft reports with limited substantive comments, review staff work, and develop effective Lead Auditors
• Clear written and verbal communication, sound judgment, attention to detail, and ability to manage competing deadlines
• Proficiency with Microsoft Office and the ability to learn audit and GRC systems; commitment to confidentiality and client service
• CISA and/or an active CPA license; CISM, CISSP, ISO 27001 Lead Auditor, or HITRUST credentials are also valued
• Experience with a Big 4 firm or a national CPA firm
• Client-service experience in public accounting, advisory, consulting, or professional services
• Experience assessing cloud and SaaS environments and modern security controls, including access management, change management, CI/CD, and logging and monitoring
• Experience with SOX IT controls or CIS benchmarks

Benefits

• Remote work (United States or Canada)

Company Overview