Information Security Associate -Senior Associate System and Organization Controls (SOC 1 / SOC 2) Compliance

Tevora is a cybersecurity, technology, and compliance consulting company that helps organizations create more secure digital environments. The Information Security Associate-Senior Associate will support SOC 1 and SOC 2 compliance assessments, audits, gap analyses, remediation, and related information security compliance projects. The role also involves developing client documentation, identifying compliance exceptions, communicating with stakeholders, and contributing to internal practice improvements.

What you'll do:

• Participating in IT and Compliance assessments, audits, gap analyses, and remediation
• Actively contributing to projects in the areas of System and Organization Controls (SOC 1 & SOC 2) Compliance assessments
• Communicating with Tevora project leads and project stakeholders to effectively convey questions, updates, and the needs of a project
• Supporting various information security compliance projects, such as HITRUST, C5, PCI, or ISO gap assessments
• Assisting in the development of customized policies, procedures, controls, disaster recovery plans, and other documentation for applications, systems, and infrastructure for our clients
• Identifying policy or compliance exceptions for Clients, including working directly with the teams to document exceptions, and identifying compensating controls and remediation action plans
• Additional duties as assigned

What they're looking for:

• This role on the SOC Compliance team is looking for a passionate individual who can apply solid Cyber Security fundamentals, who has a solid professional demeanor, and who knows how to learn by doing
• The successful candidate for this role will be detail-oriented, have a solution-focused attitude, and possess strong written and verbal communication skills
• Have knowledge of security policy frameworks and control design
• Have knowledge of security architecture, network, and systems design
• Completed a minimum of 1 year of experience in information security, information technology, business consulting, enterprise risk, or compliance field
• Possess knowledge of common IT and security concepts such as firewall management, server management, access control, and authentication
• Ability to connect easily with clients and colleagues to communicate effectively across business and technical boundaries- to translate between technical and business communities
• Ability to work independently with minimal guidance
• Proficient in writing executive-level reports and technical documentation
• Commitment to continued learning
• Proficient in MS Office tools and basic professional acumen
• At least One Professional Certification completed or in progress (Sec +, CCNA, ISO Lead Implementer, etc.)

Benefits:

• Comprehensive benefits offering
• Paid time off and holidays
• 401K with Company discretionary match
• Vibrant work culture
• Hybrid work arrangement
• Ongoing training opportunities